2.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-47388

CVE-2026-47388: NocoDB: Missing Ownership Check in MCP Attachment Read

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, a low-privilege MCP token holder with knowledge of an attachment path could read any file in shared storage, including attachments belonging to other bases and workspaces, because the MCP readAttachment tool did not verify the file's ownership. This vulnerability is fixed in 2026.05.1.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-47388

CVE-2026-47388:

2.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation NoneAutomatable YesTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
nocodb	npm	<= 2026.05.0	2026.05.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability allowed a low-privilege user to read attachments from any base by crafting a special request. This was due to a missing ownership check in the readAttachment tool. The patch addresses this by adding a baseId to various data structures and using context-specific database models. This ensures that all data access operations are scoped to the user's current base. The key changes are in packages/nocodb/src/db/BaseModelSqlv2/nested-link-preparator.ts and packages/nocodb/src/db/BaseModelSqlv2.ts, where the code now uses childContext, parentContext, and mmContext to ensure that linked records are accessed within the correct base. While the function readAttachment is not directly modified in the patch, the underlying database models that it uses are now secure.

Vulnerable functions

NestedLinkPreparator.prepare

packages/nocodb/src/db/BaseModelSqlv2/nested-link-preparator.ts

This class is responsible for preparing nested link operations. The vulnerability existed because it did not properly enforce base-level separation, allowing a user to craft a request that would access resources from another base. The patch adds the necessary context to prevent this.

BaseModelSqlv2.bulkInsert

packages/nocodb/src/db/BaseModelSqlv2.ts

This function is used to insert records in bulk. The vulnerability could be triggered by a malicious user providing a specially crafted payload that would cause the function to access resources from another base. The patch ensures that all operations are performed within the correct base context.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.