budibase vulnerabilities and fixes

Recent CVEs affecting budibase, with upgrade or downgrade steps. 7 tracked.

budibase has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-06-26. Highest priority: CVE-2026-54350 (score 56/100).

• CVE-2026-54350 CRITICAL 10.0 UPGRADE Budibase is an open-source low-code platform
• CVE-2026-54353 HIGH 8.5 UPGRADE Budibase is an open-source low-code platform
• CVE-2026-54352 CRITICAL 9.6 UPGRADE Budibase is an open-source low-code platform
• CVE-2026-54351 HIGH 8.2 UPGRADE Budibase is an open-source low-code platform
• CVE-2026-50137 CRITICAL 9.4 UPGRADE Budibase is an open-source low-code platform
• CVE-2026-50136 HIGH 7.4 UPGRADE Budibase is an open-source low-code platform
• CVE-2026-50132 HIGH 7.3 UPGRADE Budibase is an open-source low-code platform

FAQ

How do I fix budibase vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is budibase being exploited right now?

None of the tracked budibase CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which budibase CVE should I patch first?

CVE-2026-54350 currently ranks highest (56/100): Budibase is an open-source low-code platform.

RSS feed for budibase · ← Back to latest CVEs