CVE-2026-35219 | Budibase up to 3.41.2 Automation Steps outgoingWebhook.ts server-side request forgery

August 17, 2026 Yanac

A vulnerability was found in Budibase up to 3.41.2. It has been rated as critical. The affected element is an unknown function of the file packages/server/src/automations/steps/outgoingWebhook.ts of the component Automation Steps. Performing a manipulation results in server-side request forgery.

This vulnerability is cataloged as CVE-2026-35219. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More