Authorization Bypass in ToolJet Affects Multiple Workspaces

CVE-2026-70642

What is CVE-2026-70642?

ToolJet, prior to version 3.21.94, is susceptible to an authorization bypass vulnerability affecting the app environments init endpoint. This allows authenticated users to access app version metadata from other workspaces. Attackers can exploit this flaw by sending GET requests to the /api/app-environments/init endpoint with an editing_version_id from a different workspace, making it possible to obtain sensitive information such as version name, description, status, current environment ID, and app ID. This vulnerability arises due to the lack of scoping for the lookup process, failing to restrict access based on the caller's organization.

References