CVE-2026-82869
Received Received - Intake

Privilege Escalation in ToolJet Database via Join Tables Endpoint

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: VulnCheck

Description
ToolJet Database versions before v3.16.44 contain a privilege escalation vulnerability in the join_tables endpoint that grants JOIN_TABLES ability to all authenticated users without role or workspace membership validation. Attackers can read arbitrary ToolJet Database tables from any workspace by supplying victim workspace identifiers in the request path while authenticating with their own workspace credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-31
Last Modified
2026-08-31
Generated
2026-08-31
AI Q&A
2026-08-31
EPSS Evaluated
N/A
NVD
CVE-2026-82869
EUVD
EUVD-2026-68404

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
tooljet database to 3.16.44 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a privilege escalation flaw in ToolJet Database versions before v3.16.44. It allows authenticated users to bypass authorization checks in the join_tables endpoint and access arbitrary database tables across any workspace by manipulating request paths with victim workspace identifiers. The issue stems from improper validation of user roles or workspace membership.

Detection Guidance

To detect this vulnerability, monitor ToolJet Database logs for unauthorized access attempts to the join_tables endpoint. Check for requests with mismatched workspace IDs between the path and user token. Look for low-privilege users attempting to access tables outside their workspace.

Impact Analysis

Attackers can read sensitive data from any workspace by exploiting this flaw. Even low-privilege users or non-members can access unauthorized tables. This leads to unauthorized data exposure, potential data breaches, and privilege escalation within their own workspace.

Compliance Impact

This vulnerability can lead to unauthorized access to sensitive data, violating compliance requirements for data protection like GDPR and HIPAA. It may result in data breaches, unauthorized disclosures, and failure to meet regulatory standards for access controls and data integrity.

Mitigation Strategies

Immediately upgrade ToolJet Database to version v3.16.44 or later. Restrict JOIN_TABLES ability to admin or builder roles only. Ensure users are active members of the requested workspace before granting access. Validate organization ID consistency between path and user token.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82869. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart