Apitable vulnerabilities
We track 2 vulnerabilities in Apitable products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 2, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Apitable vulnerabilities
- 7.5 High severity
apitable: Missing Authentication for Critical Functionality
APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identif
- 8.2 High severity
apitable: Missing Authentication for Critical Functionality
APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in InternalUserController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx g