VULNRABLE / Vulnerability / GHSA-hp6v-6jw7-gv2f
GHSA-hp6v-6jw7-gv2f
CRITICAL WATCH @budibase/server GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email_verified
What this means
GHSA-hp6v-6jw7-gv2f is a critical-severity vulnerability affecting @budibase/server, rated CVSS 9.5. Published July 25, 2026.
View full advisory at GHSA →