Authorization Bypass in Teable Affects Folder Management
CVE-2026-112004

2.3LOW

Key Information:

Vendor

Teableio

Status
Teable
Vendor
CVE Published:
18 October 2026

What is CVE-2026-112004?

Teable versions prior to a specific release exhibit an authorization bypass vulnerability that permits authenticated users to rename folders across different bases. Attackers can exploit this flaw by providing a foreign folderId while using the PATCH /api/base/:baseId/node/folder/:folderId endpoint. The validation checks applied only against the baseId in the URL fail to restrict access based on user membership, potentially leading to unauthorized modifications in folder structures.

Affected Version(s)

teable 0 < 2026-10-12T12-45-53Z.3331

References

https://github.com/teableio/teable/security/advisories/GH...
vendor-advisory
https://github.com/teableio/teable/commit/3c1c4646bfddfb1...
patch
https://github.com/teableio/teable/releases/tag/release.2...
release-notes

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

WHS4th Team TokenManiZo
.