CVE-2026-126287 | NocoDB up to 2026.06.1 OAuth Token oauth-token.service.ts race condition

November 13, 2026 Yanac

A vulnerability described as critical has been identified in NocoDB. Affected by this issue is some unknown functionality of the file oauth-token.service.ts of the component OAuth Token. Executing a manipulation can lead to race condition.

This vulnerability is handled as CVE-2026-126287. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More