CVE-2026-126289 | NocoDB up to 2026.05.2 Export Service export.service.ts injection

November 13, 2026 Yanac

A vulnerability classified as critical was found in NocoDB. Affected by this vulnerability is an unknown functionality of the file export.service.ts of the component Export Service. Executing a manipulation can lead to injection.

The identification of this vulnerability is CVE-2026-126289. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More