CVE-2026-70642
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Nov 12, 2026
Vendor
unknown
Description
ToolJet before 3.21.94, fixed in commit e5f387a, contains an authorization bypass vulnerability in the app environments init endpoint that allows authenticated users to read app version metadata belonging to other workspaces. Attackers can send GET requests to /api/app-environments/init with an editing_version_id from another workspace to retrieve the version name, description, status, current environment ID, and app ID, because the lookup is not scoped to the caller's organization.