A critical authorization bypass vulnerability in ToolJet allows authenticated users to access, modify, or destroy database content belonging to other organizations.

This is an authorization bypass flaw (CWE-639) where the application fails to validate that an authenticated Builder user belongs to the organization specified in the tooljet-db endpoint path. By manipulating the organizationId parameter, an attacker can perform cross-tenant data exfiltration or destruction.

The ability for a user to interact with database tables across tenant boundaries poses a severe risk to multi-tenant data confidentiality and integrity. Given the CVSS score of 9.9, this vulnerability could lead to the permanent loss of sensitive business data, unauthorized exposure of proprietary information, and significant reputational damage to organizations relying on ToolJet for data management.

Immediate Action: Upgrade your ToolJet instance to version 3.16.208 or later immediately to apply the necessary authorization checks.

Proactive Monitoring: Review application access logs for anomalous requests to tooljet-db endpoints that reference organization IDs outside of the expected scope.

Compensating Controls: Implement strict network access controls or a Web Application Firewall to monitor and block requests containing suspicious or unauthorized organization ID patterns.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a critical risk to the integrity of multi-tenant environments. System administrators must prioritize the update to version 3.16.208 to enforce proper authorization boundaries. Failure to patch this flaw leaves the entire database infrastructure exposed to unauthorized modification or total data destruction by any authenticated user.