HighVulnerability
GHSA-pvcr-8mvp-w8qr: Budibase: Chat-Link Handoff Identity Confusion (Same-Tenant Account-Link CSRF)
- Identifier
- GHSA-pvcr-8mvp-w8qr
- Published
- Record updated
- Affected
- @budibase/server <= 3.38.1
- Fixed in
- No fixed version was stated when the source was last read.
Summary
The Budibase AI chat-link handoff endpoints, GET and POST /api/chat-links/:instance/:token/handoff, are on a public route with no CSRF middleware. The confirmation token is rendered in plaintext into the confirmation page, and the POST binds an external chat identity to the victim's globalUserId. An attacker who induces a same-tenant victim to submit the confirmation POST can act as that user inside Budibase automations and agent operations.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-126994: braindecode model config deserialization flaw via activation argumentSimilar attack · NVD/CVE Database
- MediumAI found Linux kernel bugs that remained undetected for decadesSimilar attack · CSO Online
- InfoInside an AI Attack Against a US RetailerSimilar attack · Dark Reading
- HighCVE-2026-67547: taOS remote code execution via skill-exec endpoint for non-admin usersSimilar attack · NVD/CVE Database
- MediumCVE-2026-65957: Helio dashboard CORS origin validation bypass via private-network prefix matchSimilar attack · NVD/CVE Database