CERT24CVE-2026-121736 — NocoDB 0.300.0 through versions before 2026.08.0 allow unauthenticated OAuth authorization code creationLoading data…
CERT24Threat Observatory
Period

CVE-2026-121736 — NocoDB 0.300.0 through versions before 2026.08.0 allow unauthenticated OAuth authorization code creation

NocoDB 0.300.0 and versions before 2026.08.0 contain missing authentication for a critical function. Unauthenticated attackers can create OAuth authorization codes.

← Back to intelligence

CVE-2026-121736 — NocoDB 0.300.0 through versions before 2026.08.0 allow unauthenticated OAuth authorization code creation

NocoDB 0.300.0 and versions before 2026.08.0 contain missing authentication for a critical function. Unauthenticated attackers can create OAuth authorization codes.