CVE-2026-73300

Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading to complete database compromise. This vulnerability is fixed in 3.40.0.

• CWE-89

• https://github.com/Budibase/budibase/releases/tag/3.40.0
• https://github.com/Budibase/budibase/security/advisories/GHSA-q6x4-v3qx-85qw
• https://github.com/Budibase/budibase/security/advisories/GHSA-q6x4-v3qx-85qw

Published

Aug 12, 2026

Last Modified

Aug 12, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-73295Material for MkDocs is a powerful documentation framework bu…5.4
• CVE-2026-73296Microsoft UFO open-source framework for intelligent automati…9.4
• CVE-2026-73297Microsoft UFO open-source framework for intelligent automati…6.9
• CVE-2026-73298The Microsoft Container Migration Solution Accelerator is a …8.7
• CVE-2026-73299Prompty is a markdown file format (.prompty) for LLM prompts…10
• CVE-2026-7330The Auto Affiliate Links plugin for WordPress is vulnerable …7.2
• CVE-2026-73301Budibase is an open-source low-code platform. Prior to 3.39.…4.3
• CVE-2026-73302Budibase is an open-source low-code platform. Prior to 3.39.…9
• CVE-2026-73303Budibase is an open-source low-code platform. Prior to 3.40.…8.2
• CVE-2026-73304Budibase is an open-source low-code platform. Prior to 3.39.…4.9
• CVE-2026-73305Budibase is an open-source low-code platform. Prior to 3.39.…8.8
• CVE-2026-73306Budibase is an open-source low-code platform. Prior to 3.39.…5.3