CVE-2026-126291 | NocoDB up to 2026.06.1 cte.utils base-user.cte.utils.ts sql injection

November 13, 2026 Yanac

A vulnerability identified as critical has been detected in NocoDB up to 2026.06.1. Affected by this issue is some unknown functionality of the file base-user.cte.utils.ts of the component cte.utils. Performing a manipulation results in sql injection.

This vulnerability is reported as CVE-2026-126291. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More