CVE-2026-73410

Budibase is an open-source low-code platform. Prior to 3.40.0, packages/backend-core/src/utils/outboundFetch.ts pinned a validated address through a Node agent, but the REST integration used getDispatcher from packages/backend-core/src/utils/fetch.ts, causing undici to ignore that agent and resolve the hostname again. A builder could use DNS rebinding to make packages/server/src/integrations/rest.ts connect to an internal address after a public address passed validation, with full response access and arbitrary REST methods. The fix adds createPinnedLookup support to the undici dispatcher and passes the validated address to custom fetch implementations. This issue is fixed in version 3.40.0.

• CWE-367
• CWE-918

• https://github.com/Budibase/budibase/commit/5758bdb242802ca20c4ed0dc579e4330ee898ef3
• https://github.com/Budibase/budibase/security/advisories/GHSA-v42f-v8xc-j435

Published

Aug 17, 2026

Last Modified

Aug 17, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-73405An authorization bypass vulnerability in Vulnerability-Looku…5.3
• CVE-2026-73406Budibase is an open-source low-code platform. Prior to 3.39.…7.5
• CVE-2026-73407Budibase is an open-source low-code platform. Prior to 3.40.…9
• CVE-2026-73408Budibase is an open-source low-code platform. Prior to 3.39.…7.6
• CVE-2026-73409Budibase is an open-source low-code platform. Prior to 3.40.…5.1
• CVE-2026-7341Use after free in WebRTC in Google Chrome prior to 147.0.772…8.8
• CVE-2026-73411Shescape is a simple shell escape library for JavaScript. Pr…6.3
• CVE-2026-73412Shescape is a simple shell escape library for JavaScript. Pr…6.3
• CVE-2026-73413Shescape is a simple shell escape library for JavaScript. Fr…8.7
• CVE-2026-73414Shescape is a simple shell escape library for JavaScript. Pr…9.2
• CVE-2026-73415jupyterlab is an extensible environment for interactive and …7.5
• CVE-2026-73416jupyterlab is an extensible environment for interactive and …6.1