Uncontrolled Resource Consumption Vulnerability in NocoDB by NocoDB

CVE-2026-126277

What is CVE-2026-126277?

NocoDB versions prior to 2026.08.1 are susceptible to an uncontrolled resource consumption vulnerability whereby unauthenticated attackers can exploit this flaw through the shared-view bulk API. By sending extensive filter arrays, attackers can prompt the application to perform extensive database queries for each minimal filter object posted. This action can lead to significant resource exhaustion, potentially crashing the NocoDB process and impacting service availability. It is crucial for users to upgrade to the latest version to mitigate these risks and enhance server resilience.

References