CVE-2026-46425 | budibase up to 3.38.1 scim.ts authorization

May 27, 2026 Yanac

A vulnerability marked as critical has been reported in budibase up to 3.38.1. Affected is an unknown function of the file packages/worker/src/api/routes/global/scim.ts. This manipulation causes missing authorization.

This vulnerability is registered as CVE-2026-46425. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More