CVE-2026-72859 | Budibase up to 3.39.4 S3 Attachment Upload Endpoint privileges management

August 14, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Budibase up to 3.39.4. This affects an unknown function of the component S3 Attachment Upload Endpoint. This manipulation causes improper privilege management.

This vulnerability appears as CVE-2026-72859. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More