Excessive Authentication Attempts Vulnerability in NocoDB by NocoDB

CVE-2026-116123

What is CVE-2026-116123?

A vulnerability has been identified in NocoDB affecting versions up to 2026.07.0, specifically in the validatePassword function within the /auth/user/signup file. This weakness allows an attacker to exploit excessive authentication attempts remotely, potentially leading to unauthorized access. While the complexity of executing this attack is high, the vendor's documentation suggests it was intentionally designed this way. Furthermore, the vendor's response to initial disclosures has been lacking, as evidenced by the deletion of relevant GitHub issues without explanation.

References