CVE-2026-121736 | NocoDB up to 2026.05.1 OAuth Authorization /api/v2/oauth/authorize client_id/redirect_uri/approved missing authentication

A vulnerability categorized as problematic has been discovered in NocoDB up to 2026.05.1. Impacted is an unknown function of the file /api/v2/oauth/authorize of the component OAuth Authorization. Such manipulation of the argument client_id/redirect_uri/approved leads to missing authentication.

This vulnerability is documented as CVE-2026-121736. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More