CVE-2026-49979 | Appsmith up to 1.98 TCP Connection send-test-email MailException.getMessage smtpPort information exposure (GHSA-vvxf-f8q9-86gh)

June 25, 2026 Yanac

A vulnerability marked as problematic has been reported in Appsmith up to 1.98. This affects the function MailException.getMessage of the file /api/v1/admin/send-test-email of the component TCP Connection Handler. This manipulation of the argument smtpPort causes information exposure through error message.

This vulnerability appears as CVE-2026-49979. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More