Read the docs

teableio

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

teableio records in CISA KEV

No teableio vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-76156 CVE-2026-112004 · GHSA-f2vw-v2g4-6v2v

Teable authorization bypass lets users rename folders in other bases

Priority MEDIUM 45

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.0031 Published 2026-10-18 Fixed in 2026-10-12T12-45-53Z.3331 CWE-639
TI-2026-40937 CVE-2026-56773 · GHSA-325v-m87x-26cp

Teable - Missing Authorization in v2 REST API

Priority LOW 38

Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00537 Published 2026-06-26 Fixed in 2026-06-15T04-43-24Z.1912 CWE-862
TI-2026-40945 CVE-2026-56781 · GHSA-49fm-7w64-4wqc

Teable - Unauthenticated Hidden Field Disclosure via Projection Parameter Override

Priority LOW 37

Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allows anonymous attackers to access hidden field data by supplying arbitrary field IDs in the projection parameter of the sh…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00397 Published 2026-06-29 Fixed in 2026-06-15T04-43-24Z.1912 CWE-639
Open these records in search →