CVE-2026-84485
Received Received - Intake

Unauthenticated Member Enumeration in APITable

Publication date: 2026-09-02

Last updated on: 2026-09-02

Assigner: VulnCheck

Description
APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identifiers obtained from shared links or public templates to enumerate the complete member directory of any workspace.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-02
Last Modified
2026-09-02
Generated
2026-09-02
AI Q&A
2026-09-02
EPSS Evaluated
N/A
NVD
CVE-2026-84485
EUVD
EUVD-2026-69797

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
apitable apitable to 1.13.0-beta.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-84485 is a missing authentication vulnerability in APITable versions up to 1.13.0-beta.1. The internal organization loadOrSearch endpoint does not require authentication, allowing unauthenticated attackers to access sensitive data such as member names, email addresses, and team hierarchies. Attackers can exploit this by using space identifiers from shared links or public templates to enumerate the complete member directory of any workspace.

Detection Guidance

To detect this vulnerability, check if your APITable instance (versions <= 1.13.0-beta.1) exposes the /internal/org/loadOrSearch endpoint without authentication. Use curl to query the endpoint with a space ID: curl -X GET 'http://<target>/internal/org/loadOrSearch?spaceId=<id>' If it returns member names, emails, or team data without requiring login, the system is vulnerable.

Impact Analysis

This vulnerability allows attackers to gather sensitive information about an organization's members, including their names and email addresses. This could lead to targeted phishing attacks, social engineering, or further exploitation of the compromised data. Organizations using affected APITable versions risk unauthorized access to internal team structures.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA due to unauthorized access to personal data. GDPR requires protecting personal data, and HIPAA mandates safeguarding protected health information. A breach exposing member emails and names may violate these regulations, resulting in legal penalties and reputational damage.

Mitigation Strategies

Upgrade APITable to a version beyond 1.13.0-beta.1 where this issue is fixed. If upgrading is not immediately possible, restrict access to the /internal/org/loadOrSearch endpoint via network controls or firewall rules. Review and apply authentication requirements for this endpoint in your configuration.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84485. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart