Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: teableio Clear all filters
TI-2026-76156 CVE-2026-112004 · GHSA-f2vw-v2g4-6v2v

Teable authorization bypass lets users rename folders in other bases

Priority MEDIUM 45

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.0031 Published 2026-10-18 Fixed in 2026-10-12T12-45-53Z.3331 CWE-639
TI-2026-40945 CVE-2026-56781 · GHSA-49fm-7w64-4wqc

Teable - Unauthenticated Hidden Field Disclosure via Projection Parameter Override

Priority LOW 37

Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allows anonymous attackers to access hidden field data by supplying arbitrary field IDs in the projection parameter of the sh…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00397 Published 2026-06-29 Fixed in 2026-06-15T04-43-24Z.1912 CWE-639
TI-2026-40937 CVE-2026-56773 · GHSA-325v-m87x-26cp

Teable - Missing Authorization in v2 REST API

Priority LOW 38

Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00537 Published 2026-06-26 Fixed in 2026-06-15T04-43-24Z.1912 CWE-862