A privilege escalation flaw in ToolJet Database allows authenticated users to access sensitive data across workspaces, necessitating an immediate update to version 3.16.44 or later.

The vulnerability exists in the join_tables endpoint, which fails to validate workspace membership or user roles. Any authenticated user can exploit this by providing a target workspace identifier to read arbitrary database tables.

The ability for unauthorized users to access data from other workspaces poses a significant risk to data confidentiality and regulatory compliance. Given the CVSS score of 7.7, this high-severity vulnerability could lead to the exposure of sensitive business information and unauthorized data exfiltration.

Immediate Action: Upgrade all instances of ToolJet to version 3.16.44 or newer to incorporate the necessary authorization checks.

Proactive Monitoring: Review access logs for the join_tables endpoint to identify any suspicious requests involving workspace identifiers that do not belong to the authenticated user.

Compensating Controls: If patching is not immediately feasible, restrict network access to the database management interface and implement strict API gateway controls to filter requests to the join_tables endpoint.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a critical failure in authorization logic that directly impacts data isolation between tenants. Administrators must prioritize updating to version 3.16.44 immediately to prevent unauthorized cross-workspace data access. Failure to remediate this issue leaves the environment exposed to internal privilege escalation risks.