CVE-2026-73068: ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI

ToolJet, a platform for building internal tools and AI agents, had a security flaw in its database API before version 3.20.207 where it didn't properly check if users belonged to an organization before letting them access its data. An authenticated user (someone with a valid login) could trick the system by using their own workspace ID in a header while targeting another organization's database through API requests, allowing them to see or modify other organizations' tables and data.