{"id":"CVE-2026-35216","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-35216","generatedAt":"2026-10-28T04:33:40.572Z","title":"Prior to version 3.33.4, an unauthenticated attacker can achieve Remote Code Execution (RCE) on the Budibase server by triggering an automation that contains a Bash step via the public webhook endpoint.","description":"Budibase is an open-source low-code platform. Prior to version 3.33.4, an unauthenticated attacker can achieve Remote Code Execution (RCE) on the Budibase server by triggering an automation that contains a Bash step via the public webhook endpoint. No authentication is required to trigger the exploit. The process executes as root inside the container. This issue has been patched in version 3.33.4.","published":"2026-04-03T16:16:42.000Z","lastModified":"2026-10-06T22:10:00.000Z","status":"Analyzed","sourceIdentifier":"security-advisories@github.com","cvss":{"version":"3.1","score":9,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-78"],"affected":["budibase/budibase"],"epss":{"score":0.10721,"percentile":0.95796,"date":"2026-10-27","history":[{"date":"2026-09-24","score":0.01168,"percentile":0.65957},{"date":"2026-10-25","score":0.10721,"percentile":0.95788}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 10.7%, higher than 96% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-10-25T00:00:00.000Z","detail":{"to":0.10721,"from":0.01168,"percentile":0.95788},"summary":"EPSS moved from 1.2% to 10.7% probability of exploitation in the next thirty days."}],"references":[{"url":"https://github.com/Budibase/budibase/commit/f0c731b409a96e401445a6a6030d2994ff4ac256","tags":["Patch"],"source":"security-advisories@github.com"},{"url":"https://github.com/Budibase/budibase/pull/18238","tags":["Issue Tracking","Patch"],"source":"security-advisories@github.com"},{"url":"https://github.com/Budibase/budibase/releases/tag/3.33.4","tags":["Product","Release Notes"],"source":"security-advisories@github.com"},{"url":"https://github.com/Budibase/budibase/security/advisories/GHSA-fcm4-4pj2-m5hf","tags":["Exploit","Vendor Advisory"],"source":"security-advisories@github.com"},{"url":"https://github.com/Budibase/budibase/security/advisories/GHSA-fcm4-4pj2-m5hf","tags":["Exploit","Vendor Advisory"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-35216","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}