Insecure Direct Object Reference in TrailBase by TrailBaseIO

CVE-2026-119759

What is CVE-2026-119759?

TrailBase versions 0.28.2 through 0.35.10 exhibit an insecure direct object reference (IDOR) vulnerability that permits authenticated attackers to manipulate object-store id metadata within std.FileUpload columns. This flaw occurs due to the lack of ownership validation during insert and update processes. By exploiting this issue, an attacker can reference another user's file id tied to a record they control, enabling them to read sensitive file bytes or potentially causing permanent deletion of the victim's files. Additionally, attackers may utilize a $like filter on the file column to systematically recover stripped ids character by character, further exposing users to risks.

References