CVE-2026-55411: ToolJet decrypt endpoint exposes data-source credentials across organizations

Summary

ToolJet, an open-source platform for building internal tools and AI agents, has a cross-tenant flaw before 3.20.1780-lts. The authenticated endpoint POST /api/data-sources/decrypt returns decrypted plaintext for any credential_id supplied in the request body, because the handler lacks ValidateDataSourceGuard and the CredentialsService.getValue() lookup has no organization scoping. Any authenticated user can therefore decrypt another organization's data-source secrets.

Mitigation

Fixed in 3.20.1780-lts.

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News