CVE-2026-100688 | Budibase up to 3.44.x Application Package Endpoint appPackage information disclosure

September 26, 2026 Yanac

A vulnerability was found in Budibase up to 3.44.x. It has been declared as problematic. The affected element is an unknown function of the file /api/applications/:appId/appPackage of the component Application Package Endpoint. The manipulation results in information disclosure.

This vulnerability is cataloged as CVE-2026-100688. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More