CVE-2026-55412 | ToolJet up to 3.20.178-lt/169.254.169.254.nip.io RestAPI Data Source server-side request forgery (GHSA-h49f-mhmm-jx4w)

June 25, 2026 Yanac

A vulnerability identified as critical has been detected in ToolJet up to 3.20.178-lt/169.254.169.254.nip.io. The impacted element is an unknown function of the component RestAPI Data Source. This manipulation causes server-side request forgery.

This vulnerability appears as CVE-2026-55412. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More