IP Address Spoofing Vulnerability in NocoDB from NocoDB

CVE-2026-126268

What is CVE-2026-126268?

NocoDB versions earlier than 2026.08.0 are susceptible to an IP address spoofing vulnerability that can be exploited by unauthenticated attackers. This flaw arises from the unconditional enabling of Express trust proxy, allowing attackers to forge their source IP by manipulating X-Forwarded-For headers. As a result, malicious actors can misrepresent their origin in audit and request logs, significantly obstructing investigative processes and potentially circumventing rate limiting measures on public APIs.

References