Medium severity · published Aug 31, 2026
CVE-2026-82875
ToolJet before v3.16.208 Authorization Bypass via organizationId
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
ToolJet before v3.16.208 contains an authorization bypass vulnerability in TooljetDB controller endpoints that accept organizationId from URL path without verifying it matches the authenticated user's workspace. Authenticated users can enumerate, create, rename, and delete TooljetDB tables in any other workspace by manipulating the organizationId parameter in requests.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TO
ToolJet · ToolJet
before 3.16.208 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-82875
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-82875
github.com
https://github.com/ToolJet/ToolJet/security/advisories/GHSA-cx42-x23w-vhvf
www.vulncheck.com
https://www.vulncheck.com/advisories/tooljet-before-3.16.208-authorization-bypass-via-organizationid
More from ToolJet
9.9
CVE-2026-82874
ToolJet before v3.16.208 Cross-Tenant Authorization Bypass via tooljet-db
9.6
CVE-2026-82870
ToolJet before v3.16.208 Cross-Tenant Database Manipulation
9.4
CVE-2026-55413
ToolJet - Marketplace Plugin Poisoning Enables Instance-Wide Remote Code Execution
9.1
CVE-2026-82872
ToolJet before v3.16.208 Cross-Workspace Authorization Bypass
8.8
CVE-2026-54344
ToolJet GitHub Actions comment body shell injection exposes deployment secrets