CVE-2026-48148
Last modified
CVE-2026-48148 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Budibase is an open-source low-code platform. Prior to 3.35.3, the VectorDB configuration endpoint in Budibase accepts a host parameter that undergoes no validation against internal IP ranges, reserved hostnames, or URL schemes. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
Budibase is an open-source low-code platform. Prior to 3.35.3, the VectorDB configuration endpoint in Budibase accepts a host parameter that undergoes no validation against internal IP ranges, reserved hostnames, or URL schemes. Any authenticated user with builder-level access can supply an arbitrary host value such as 169.254.169.254 or localhost, causing the server to initiate outbound TCP connections to internal network addresses or cloud metadata endpoints on their behalf.This vulnerability is fixed in 3.35.3.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-48148?
How severe is CVE-2026-48148?
How do I fix CVE-2026-48148?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-48141There is a memory leak in NI grpc-device BeginSidebandStream…7.5
- CVE-2026-48142NGINX Plus and NGINX Open Source have a vulnerability in the…6.3
- CVE-2026-48144Improper Validation of Certificate with Host Mismatch vulner…9.1
- CVE-2026-48145Improper Validation of Certificate with Host Mismatch vulner…7.5
- CVE-2026-48146Budibase is an open-source low-code platform. Prior to 3.39.…7.7
- CVE-2026-48147Budibase is an open-source low-code platform. Prior to 3.35.…6.5
- CVE-2026-48149Budibase is an open-source low-code platform. Prior to 3.39.…8.1
- CVE-2026-4815A SQL Injection vulnerability has been found in Support Boar…8.8
- CVE-2026-48150Budibase is an open-source low-code platform. Prior to 3.39.…9
- CVE-2026-48151Budibase is an open-source low-code platform. Prior to 3.39.…7.5
- CVE-2026-48152Budibase is an open-source low-code platform. Prior to 3.39.…8.1
- CVE-2026-48153Budibase is an open-source low-code platform. Prior to 3.39.…8.5
Are you affected by CVE-2026-48148?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST