CVE-2026-50189 | Appsmith up to 2.0 RPC Interface /api/v1/admin/env permissive list of allowed inputs (GHSA-v49v-673j-g4vj)

June 25, 2026 Yanac

A vulnerability classified as problematic has been found in Appsmith up to 2.0. This issue affects some unknown processing of the file /api/v1/admin/env of the component RPC Interface. Performing a manipulation results in permissive list of allowed inputs.

This vulnerability is known as CVE-2026-50189. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More