CVE-2026-112004 Teable before 2026-10-12T12-45-53Z.3331 Authorization Bypass via Folder Rename Endpoint
Authenticated attackers can rename folders in bases they do not belong to by exploiting an authorization bypass in the folder rename endpoint.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-112004?
CVE-2026-112004 is a low-severity missing authorization vulnerability in teableio teable, published on 18 Oct 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so attackers can rename folders in bases where they lack membership.
Weakness: CWE-639
Which versions are affected by CVE-2026-112004?
How do I fix CVE-2026-112004?
No fix has been published for CVE-2026-112004 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-112004 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-112004 exists.
Sources
Also known as GHSA-5qj3-rq3x-q739, GHSA-f2vw-v2g4-6v2v.