PT-2026-22631 · Nocodb · Nocodb

Tulgaaaaaaaa · CVE-2026-28360 · Published 2026-03-02 · Updated 2026-03-02

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions NocoDB versions prior to 0.301.3

Description NocoDB is software for building databases as spreadsheets. Shared view passwords were stored in plaintext in the database and compared using direct string equality. This could allow unauthorized access to shared views.

Recommendations Update to version 0.301.3 or later.

Exploit

Fix

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2026-28360

GHSA-MPP2-X7WV-38HV

Affected Products

Nocodb

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28360.json · Exploit
• https://github.com/nocodb/nocodb/security/advisories/GHSA-mpp2-x7wv-38hv · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-28360 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mpp2-x7wv-38hv · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28360 · Security Note
• https://github.com/nocodb/nocodb · Note
• https://github.com/nocodb/nocodb/releases/tag/0.301.3 · Note
• https://twitter.com/infoflowcloud/status/2028512178689425879 · Twitter Post
• https://twitter.com/CVEnew/status/2028510368251687211 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2028619558269989353 · Twitter Post
• https://t.me/CVEtracker/46139 · Telegram Post