7.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-50132

CVE-2026-50132: Budibase: Chat Identity Link Hijacking via Missing Consent & CSRF — Account Impersonation in Budibase

Budibase is an open-source low-code platform. Prior to 3.39.0, GET /api/chat-links/:instance/:token/handoff is a public endpoint (no auth required) that performs a permanent, state-changing operation: it binds an external chat identity (Slack/Discord/MS Teams) to an authenticated Budibase user account, with no consent UI and no CSRF protection. The session token in the URL is created by the attacker (from their own /link slash command) and embeds the attacker's externalUserId. When an authenticated Budibase victim visits the URL, their account is silently and permanently linked to the attacker's Slack/Discord identity. The server responds with "Authentication succeeded." — no indication of what was linked. This vulnerability is fixed in 3.39.0.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-50132

CVE-2026-50132:

7.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable NoTech Impact Total

Select your environment

→SSVCScheduled60 days

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
@budibase/server	npm	< 3.39.0	3.39.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the handoffChatLinkSession function, which handles the GET /api/chat-links/:instance/:token/handoff API endpoint. This function is designed to link an external chat identity (like Slack or Discord) to a Budibase user account. The vulnerability stems from two critical security flaws: lack of CSRF protection and missing user consent. The endpoint performs a sensitive, state-changing action on a GET request, which is inherently insecure against CSRF attacks. An attacker can generate a link token associated with their own external chat account and trick an authenticated Budibase user (the victim) into clicking the link. When the victim's browser makes the GET request, the server links the attacker's chat identity to the victim's Budibase session, granting the attacker the ability to perform actions as the victim through the AI chat agent. The patch remediates this by changing the workflow to a two-step process. The GET request to handoffChatLinkSession now displays a consent page. The actual account linking is moved to a new confirmChatLinkSession function that only responds to POST requests and requires a confirmation token, effectively mitigating the CSRF vulnerability and ensuring user consent is obtained.

Vulnerable functions

handoffChatLinkSession

packages/server/src/api/controllers/ai/chatIdentityLinks.ts

This function, exposed via the `GET /api/chat-links/:instance/:token/handoff` endpoint, was vulnerable to Cross-Site Request Forgery (CSRF) and Improper Access Control. It performed a permanent, state-changing operation (linking an external chat identity to a Budibase user account) without requiring user consent or any CSRF protection. An attacker could craft a malicious URL containing a token they generated. When a logged-in victim visits this URL, the attacker's chat identity (e.g., Slack, Discord) is silently linked to the victim's Budibase account, allowing the attacker to impersonate the victim via the AI agent.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.