CVE-2024-58394 | Retool up to 3.87.x Image Proxy /api/imageProxy url cross site scripting

October 22, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Retool up to 3.87.x. This issue affects some unknown processing of the file /api/imageProxy of the component Image Proxy. The manipulation of the argument url results in cross site scripting.

This vulnerability is identified as CVE-2024-58394. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More