High severity7.1NVD Advisory· Published Aug 28, 2026· Updated Aug 28, 2026
CVE-2026-82246
CVE-2026-82246
Description
Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints and other restricted network resources.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
1- Budibase: Critical RCE and Eight Other Flaws Disclosed Together on August 28, 2026Vypr Intelligence · Aug 28, 2026