agentprime: tooljetEvery new CVE for tooljet.https://agentprime.io/CVE-2026-118685: ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuardhttps://agentprime.io/advisories/CVE-2026-118685/https://agentprime.io/advisories/CVE-2026-118685/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 18:59:54 GMTCVECVE-2026-82875: ToolJet before v3.16.208 Authorization Bypass via organizationIdhttps://agentprime.io/advisories/CVE-2026-82875/https://agentprime.io/advisories/CVE-2026-82875/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 08:46:43 GMTCVECVE-2026-82874: ToolJet before v3.16.208 Cross-Tenant Authorization Bypass via tooljet-dbhttps://agentprime.io/advisories/CVE-2026-82874/https://agentprime.io/advisories/CVE-2026-82874/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 08:46:42 GMTCVEcriticalCVE-2026-82873: ToolJet through 3.0.0-ee-beta.2 Cross-workspace Schema Disclosure via Exporthttps://agentprime.io/advisories/CVE-2026-82873/https://agentprime.io/advisories/CVE-2026-82873/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 08:46:41 GMTCVECVE-2026-82872: ToolJet before v3.16.208 Cross-Workspace Authorization Bypasshttps://agentprime.io/advisories/CVE-2026-82872/https://agentprime.io/advisories/CVE-2026-82872/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 08:46:40 GMTCVECVE-2026-82871: ToolJet before v3.16.208 Cross-Organization Data Read via Database Routeshttps://agentprime.io/advisories/CVE-2026-82871/https://agentprime.io/advisories/CVE-2026-82871/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 08:46:40 GMTCVECVE-2026-82870: ToolJet before v3.16.208 Cross-Tenant Database Manipulationhttps://agentprime.io/advisories/CVE-2026-82870/https://agentprime.io/advisories/CVE-2026-82870/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 08:46:39 GMTCVECVE-2026-82869: ToolJet Database before v3.16.44 Privilege Escalation via join_tableshttps://agentprime.io/advisories/CVE-2026-82869/https://agentprime.io/advisories/CVE-2026-82869/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 08:46:38 GMTCVECVE-2026-73068: ToolJet: Cross-tenant Broken Access Control in ToolJet Database (tooljet-db): any authenticated user can read and write another organization's tableshttps://agentprime.io/advisories/CVE-2026-73068/https://agentprime.io/advisories/CVE-2026-73068/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 15:02:13 GMTCVECVE-2026-54344: ToolJet GitHub Actions comment body shell injection exposes deployment secretshttps://agentprime.io/advisories/CVE-2026-54344/https://agentprime.io/advisories/CVE-2026-54344/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 15:08:19 GMTCVECVE-2026-55411: ToolJet: Cross-tenant credential decryption (IDOR) in POST /api/data-sources/decrypt — any authenticated user can decrypt any organization's data-source secretshttps://agentprime.io/advisories/CVE-2026-55411/https://agentprime.io/advisories/CVE-2026-55411/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 16:08:14 GMTCVECVE-2026-55412: ToolJet Cloud - SSRF to Azure Cloud Infrastructure Compromisehttps://agentprime.io/advisories/CVE-2026-55412/https://agentprime.io/advisories/CVE-2026-55412/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 16:07:13 GMTCVECVE-2026-55413: ToolJet - Marketplace Plugin Poisoning Enables Instance-Wide Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-55413/https://agentprime.io/advisories/CVE-2026-55413/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 16:03:40 GMTCVEcriticalCVE-2022-23068: ToolJet - HTML Injection in Invite New Userhttps://agentprime.io/advisories/CVE-2022-23068/https://agentprime.io/advisories/CVE-2022-23068/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 May 2022 11:45:15 GMTCVECVE-2022-23067: ToolJet - Token Leakage via Referer Headerhttps://agentprime.io/advisories/CVE-2022-23067/https://agentprime.io/advisories/CVE-2022-23067/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 May 2022 11:45:13 GMTCVE