Budibase is a low code platform for creating internal tools, workflows, and admin panels.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 9, 2026 · NIST NVD

   Detected

   Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.24.0 and earlier, an arbitrary file upload vulnerability exists even though file extension restrictions are configured. The restriction is enforced only at the UI level. An attacker can bypass these restrictions and upload malicious files.

2. Jun 17, 2026 · NIST NVD

   Updated

   Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.24.0 and earlier, an arbitrary file upload vulnerability exists even though file extension restrictions are configured. The restriction is enforced only at the UI level. An attacker can bypass these restrictions and upload malicious files.

Affected

• cpe budibase/budibaseversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-25737

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-25737

  Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.24.0 and earlier, an arbitrary file upload vulnerability exists even though file extension restrictions are configured. The restriction is enforced only at the UI level. An attacker can

  nvd.nist.gov

References

• Exploit · github.com