A critical authorization flaw in ToolJet allows authenticated users to perform unauthorized database operations across organizations, posing a severe risk of data destruction and integrity loss.

The application fails to perform proper ownership validation for the organizationId parameter within database write and destroy routes. This vulnerability allows an authenticated user with the builder role to bypass tenant isolation and perform unauthorized actions on databases belonging to other organizations.

The ability for a malicious actor to drop tables, modify schemas, or inject arbitrary data into other organizations' databases represents a catastrophic failure of multi-tenant security. Given the CVSS score of 9.6, the potential for permanent data loss and cross-tenant contamination could lead to significant operational downtime, loss of client trust, and severe regulatory non-compliance.

Immediate Action: Upgrade your ToolJet installation to version 3.16.208 or later immediately to implement the required organization ownership validation.

Proactive Monitoring: Review application access logs for unusual database activity, particularly requests involving organization identifiers that do not belong to the authenticated user's assigned scope.

Compensating Controls: Implement strict network-level segmentation or WAF rules to restrict access to sensitive API endpoints, although these should be viewed as temporary measures until the patch is applied.

Public Exploit Available: No (exploit_available: unknown)

This vulnerability is critical because it breaks the fundamental security promise of multi-tenant isolation. System administrators must prioritize the update to version 3.16.208 to prevent unauthorized cross-tenant database manipulation. Failure to remediate this issue leaves your infrastructure susceptible to deliberate data destruction and cross-tenant unauthorized access.