A critical authorization flaw in ToolJet allows any authenticated user to perform unauthorized cross-organization data access, posing a severe risk to multi-tenant data confidentiality.

This vulnerability is a missing authorization flaw (CWE-862) occurring within database read routes. Any authenticated user can bypass organization boundaries by supplying arbitrary organization IDs in URL parameters to retrieve table schemas and sensitive row data.

The ability to access data across organizational silos constitutes a major breach of confidentiality in multi-tenant environments. Given the CVSS score of 7.7, this high-severity vulnerability could lead to the unauthorized exposure of proprietary business intelligence, customer data, and internal database structures, potentially resulting in significant regulatory and reputational damage.

Immediate Action: Upgrade all ToolJet instances to version 3.16.208 or later immediately to implement proper organization membership validation.

Proactive Monitoring: Review web server and application access logs for anomalous requests containing varying organization IDs, particularly those originating from unauthorized user accounts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with custom rules to inspect and block requests to database endpoints that contain unexpected or unauthorized organization ID parameters.

Public Exploit Available: No (exploit_available: false)

This vulnerability presents a clear risk to data isolation within your ToolJet deployment. Organizations must prioritize the update to version 3.16.208 to ensure that authorization checks are correctly enforced across all database routes. Failure to patch allows any authenticated user to potentially exfiltrate data from any organization hosted within the platform.