CVE-2026-103757: Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables that places an internal URL in an attachment column, causing the server to fetch it and return a presigned object-storage URL containing the response, such as cloud metadata credentials.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An authenticated Budibase builder user can exploit it. The issue is reached by sending a prompt to the AI table-generation API endpoint, POST /api/ai/tables.
What access does an attacker need to abuse the SSRF?
The attacker needs builder-level authenticated access and must be able to place an internal URL in an attachment column in an AI table-generation prompt. No user interaction is required.
What information could be exposed?
The server can be induced to fetch internal URLs, and the response is made available through a presigned object-storage URL. The advisory specifically notes that this can expose cloud metadata credentials.
How can I determine whether my deployment is affected?
Deployments running Budibase through version 3.41.0 are affected according to the provided information. The vulnerable code path is the uploadUrl function in packages/server/src/utilities/fileUtils.ts using raw node-fetch rather than fetchWithBlacklist.