NOCODB · CVE-2026-126279 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
NocoDB before 2026.06.2 renders unescaped field references from AI field prompts as HTML in a tooltip. A user with Creator role or above can store script that runs when another user opens the field configuration, letting an attacker read the localStorage session token and call authenticated APIs as the victim.
first public Oct 27, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Self-hosted or managed NocoDB instances before 2026.06.2 where users with Creator role or above can edit AI field prompts. Exposure depends on who can create or edit AI fields and on other users opening those field configurations. Instances with only trusted editors still carry the stored-XSS risk if an account is compromised.
Not affected if no-creator-role-users, nocodb-2026.06.2-or-later
Who cares ai-fields, nocodb, self-hosted
2026.06.2.2026.06.2 or later.NocoDB before 2026.06.2 contains a stored cross-site scripting vulnerability in PromptWithFields.vue that renders unescaped field references from AI field prompts as HTML in a tooltip. Attackers with the Creator role or above can store markup in a prompt's field reference that executes when victims open the field configuration, stealing the localStorage session token to call authenticated APIs as the victim.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.