---
id: "CVE-2026-126279"
page: "https://infrastack.ai/live/CVE-2026-126279"
kind: "vulnerability"
aliases: ["CVE-2026-126279"]
title: "NocoDB: stored XSS in AI field prompts steals session tokens"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "NocoDB", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"via": "cpe", "name": "nocodb", "fixed": [], "affected": "", "ecosystem": "npm"}]
ecosystems: ["npm", "vendor"]
tags: ["ai-fields", "ai-tooling", "nocodb", "self-hosted"]
not_affected_if: ["no-creator-role-users", "nocodb-2026.06.2-or-later"]
published_at: "2026-11-13T10:17:31+00:00"
first_seen_at: "2026-11-13T10:47:13+00:00"
updated_at: "2026-11-13T11:20:09+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126279", "first_seen_at": "2026-11-13T10:47:13+00:00"}]
exploit_sources: []
---

# NocoDB: stored XSS in AI field prompts steals session tokens

Link for people: https://infrastack.ai/live/CVE-2026-126279 (this .md is for agents)

NocoDB before 2026.06.2 renders unescaped field references from AI field prompts as HTML in a tooltip. A user with Creator role or above can store script that runs when another user opens the field configuration, letting an attacker read the localStorage session token and call authenticated APIs as the victim.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NocoDB affected range not listed fixed no fixed version listed
- npm:nocodb affected range not listed fixed no fixed version listed

## How to check

- Check the NocoDB version in use; affected builds are those before `2026.06.2`.
- Look for AI field prompts that reference other fields, created by Creator-role users you do not fully trust.

## Fix

- NocoDB: upgrade to `2026.06.2` or later.

## Timeline

- 2026-11-13T10:47:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126279

## Documents

- [advisory] Vendor advisory: github.com https://github.com/nocodb/nocodb/security/advisories/GHSA-j96w-qm45-vgp2
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/nocodb-before-2026.06.2-stored-xss-via-ai-field-prompt-tooltip

## From the sources

NocoDB before 2026.06.2 contains a stored cross-site scripting vulnerability in PromptWithFields.vue that renders unescaped field references from AI field prompts as HTML in a tooltip. Attackers with the Creator role or above can store markup in a prompt's field reference that executes when victims open the field configuration, stealing the localStorage session token to call authenticated APIs as the victim.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_