CVE-2026-82875: ToolJet Authorization Bypass Vulnerability

CVE-2026-82875 Overview

CVE-2026-82875 is an authorization bypass vulnerability in ToolJet versions before v3.16.208. The flaw resides in TooljetDB controller endpoints that accept an organizationId value from the URL path without verifying it matches the authenticated user's workspace. Authenticated users can manipulate the organizationId parameter to enumerate, create, rename, and delete TooljetDB tables in workspaces they do not belong to. The issue is tracked as CWE-863: Incorrect Authorization and is documented in the GitHub Security Advisory GHSA-cx42-x23w-vhvf.

Critical Impact
Any authenticated ToolJet user can read, modify, and destroy database tables across every workspace on the instance, breaking multi-tenant isolation.

Affected Products

ToolJet versions prior to v3.16.208
Self-hosted ToolJet deployments with multiple workspaces
ToolJet instances exposing TooljetDB functionality to authenticated users

Discovery Timeline

2026-08-31 - CVE-2026-82875 published to NVD
2026-08-31 - Last updated in NVD database

Technical Details for CVE-2026-82875

Vulnerability Analysis

ToolJet is an open-source low-code platform that provides an internal database service called TooljetDB. Workspaces are the tenancy boundary in ToolJet, and each workspace is expected to own its own set of TooljetDB tables. The affected controller endpoints route requests using an organizationId value carried in the URL path.

The controllers trust the path-supplied organizationId and use it directly to scope database operations. They do not compare the value to the workspace associated with the authenticated session or JWT. As a result, workspace membership is never enforced at the authorization layer for TooljetDB table operations.

An authenticated user in workspace A can substitute the organizationId of workspace B and receive access to workspace B's tables. This affects table listing, creation, renaming, and deletion, which collectively enable enumeration, tampering, and destruction of tenant data.

Root Cause

The root cause is missing authorization enforcement on user-supplied tenant identifiers. The controllers rely on a client-controlled path parameter rather than the server-side workspace binding established during authentication. This is a classic CWE-863 failure where the identity is authenticated but the access decision is delegated to attacker-controlled input.

Attack Vector

Exploitation requires a valid ToolJet account on the target instance and network access to the API. An attacker issues authenticated HTTP requests to TooljetDB endpoints and substitutes the organizationId path segment with the identifier of a target workspace. Refer to the VulnCheck advisory for the endpoint list and reproduction details. No user interaction is required from victims in the target workspace.

Detection Methods for CVE-2026-82875

Indicators of Compromise

TooljetDB API requests where the path organizationId does not match the workspace tied to the authenticated user or JWT.
Unexpected CREATE, RENAME, or DROP operations on TooljetDB tables from accounts that are not members of the owning workspace.
Table enumeration bursts from a single account against multiple distinct organizationId values in a short window.

Detection Strategies

Correlate the authenticated user's workspace claim against the organizationId path parameter in reverse proxy or application logs and alert on mismatches.
Review TooljetDB audit trails for table lifecycle events initiated by users outside the owning workspace.
Baseline normal per-user access to TooljetDB endpoints and flag deviations that touch multiple workspaces.

Monitoring Recommendations

Forward ToolJet application logs and API gateway logs to a centralized analytics platform for cross-workspace query analysis.
Monitor for schema changes on TooljetDB tables and reconcile them against expected workspace ownership.
Track authentication events alongside TooljetDB writes to attribute destructive actions to specific accounts.

How to Mitigate CVE-2026-82875

Immediate Actions Required

Upgrade ToolJet to version v3.16.208 or later on all self-hosted instances.
Audit TooljetDB tables across every workspace for unexpected creations, renames, or deletions since the vulnerable version was deployed.
Rotate credentials and API tokens for accounts that showed cross-workspace access patterns in logs.
Restrict network access to the ToolJet API to trusted networks while patching is completed.

Patch Information

The fix is included in ToolJet v3.16.208. The patched controllers derive organizationId from the authenticated session and validate that the caller is a member of the target workspace before executing TooljetDB operations. Patch and advisory details are available in GHSA-cx42-x23w-vhvf.

Workarounds

If immediate patching is not possible, limit ToolJet accounts to trusted users only and suspend accounts that do not require TooljetDB access.
Place ToolJet behind a reverse proxy that validates the organizationId path parameter against the authenticated session claim and blocks mismatches.
Reduce blast radius by consolidating sensitive data into a single workspace with tighter account controls until the upgrade is applied.

bash

# Configuration example
# Upgrade self-hosted ToolJet to the patched release
docker pull tooljet/tooljet:v3.16.208
docker compose down
docker compose up -d

# Verify the running version
curl -s http://localhost:3000/api/health | jq '.version'