What is GHSA-f8p8-8grw-947j?

GHSA-f8p8-8grw-947j is a security advisory published by GitHub Security Advisories with High severity. NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations...

Which CVE IDs does GHSA-f8p8-8grw-947j cover?

GHSA-f8p8-8grw-947j covers the following CVE IDs: CVE-2026-126290. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f8p8-8grw-947j?

GHSA-f8p8-8grw-947j has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-f8p8-8grw-947jHighCVSS 6.5

NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations...

Vendor

GitHub Security Advisories

Published

November 13, 2026

Last Modified

November 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-126290 →

📋 Description

NocoDB before 2026.07.0 contains an information disclosure vulnerability in base-integrations.service.ts that allows authenticated base members to read private integration configurations by omitting a query flag. Attackers can request another user's private integration without the configuration flag, bypassing the ownership check to obtain stored connection credentials.

🔗 References (4)

https://github.com/nocodb/nocodb/security/advisories/GHSA-wxxj-mghf-33v4
https://nvd.nist.gov/vuln/detail/CVE-2026-126290
https://www.vulncheck.com/advisories/nocodb-before-2026.07.0-private-integration-credential-exposure-via-base-integration-read
https://github.com/advisories/GHSA-f8p8-8grw-947j