ToolJet vulnerabilities
We track 11 vulnerabilities in ToolJet products across 2 products. 11 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
Latest ToolJet vulnerabilities
- 7.3 High severity
ToolJet: Improper Authentication
A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta. The impacted element is the function activateUserWithPassword of the file server/src/modules/onboarding/util.service.ts of the component Onboarding Signup Endpoint. Executing a manipula
- 9.9 Critical severity
ToolJet: Authorization Bypass Through User-Controlled Key
ToolJet before v3.16.208 fails to validate that authenticated users belong to the organization specified in the organizationId path parameter of tooljet-db endpoints, allowing any Builder user to read, modify, and delete tables across tenant boundaries. Attack
- 9.1 Critical severity
ToolJet: Authorization Bypass Through User-Controlled Key
ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace before performing ToolJet DB table operations. A workspace admin can create, view, and delete database tables in another workspace by replacing t
- 7.7 High severity
ToolJet: Missing Authorization
ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing any authenticated user to access other organizations' table schemas and row data. Attackers can supply arbitrary organization IDs in URL parameters to list tab
- 9.6 Critical severity
ToolJet: Authorization Bypass Through User-Controlled Key
ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy routes, allowing any builder-role user to create, alter, or drop tables in other organizations' databases. Attackers can exploit missing organization-resolving gu
- 7.7 High severity
ToolJet: Authorization Bypass Through User-Controlled Key
ToolJet Database versions before v3.16.44 contain a privilege escalation vulnerability in the join_tables endpoint that grants JOIN_TABLES ability to all authenticated users without role or workspace membership validation. Attackers can read arbitrary ToolJet
- 8.8 High severity
ToolJet: Improper Neutralization of Special Elements used in an OS Command
ToolJet is an open-source low-code platform for building internal tools. Prior to 3.20.180, ToolJet's render preview deployment workflow interpolates github.event.comment.body directly into a bash conditional in a run step, allowing any GitHub user who can com
- 9.4 Critical severity
ToolJet: Improper Control of Generation of Code
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, any authenticated user with builder role (free tier) can overwrite a globally-shared marketplace plugin with
- 8.3 High severity
ToolJet: Server-Side Request Forgery
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-s
- 7.5 High severity
tooljet/tooljet: Improper Privilege Management
Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the forgot_password_token the hacker can send the request and changed the pass
- 8.8 High severity
tooljet/tooljet: Authorization Bypass Through User-Controlled Key
The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an option but I wouldn't count on it, since it would take a long time to find a valid one