CVE-2026-126288 | NocoDB up to 2026.05.2 OAuth Client Lookup oauth.controller.ts information disclosure

November 13, 2026 Yanac

A vulnerability described as problematic has been identified in NocoDB. This impacts an unknown function of the file oauth.controller.ts of the component OAuth Client Lookup. Such manipulation leads to information disclosure.

This vulnerability is uniquely identified as CVE-2026-126288. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More