CVE-2026-126795

A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta.

A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta. The impacted element is the function activateUserWithPassword of the file server/src/modules/onboarding/util.service.ts of the component Onboarding Signup Endpoint. Executing a manipulation of the argument email can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.21.94-beta is sufficient…

12. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-126795