{"uuid": "0ef642ba-c3ce-42be-820a-750b02cf2620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72850", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117091980194395947", "content": "CVE-2026-72850: CRITICAL path traversal (CVSS 9.4) in Budibase server <3.40.0 lets authenticated builders write files outside temp dirs. Cloud-hosted \u2014 vendor patch applied server-side. Confirm upgrade. Details: https://radar.offseq.com/threat/cve-2026-72850-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-budibase-119aa29b1a7d2c6b #OffSeq #Budibase #Infosec #Vuln", "creation_timestamp": "2026-08-14T04:30:27.429193Z"}