teable vulnerabilities

2 known vulnerabilities in teable from Teableio. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  teable: Improper Neutralization of Input During Web Page Generation

  CVE-2026-127084Nov 13, 2026Teableio

  Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated users to upload SVG or HTML attachments with an attacker-chosen content type. Attackers can send the same-origin /api/attachments/read URL, s

• 8.8 High severity

  teable: Missing Authorization

  CVE-2026-56773Jun 26, 2026Teableio

  Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints l