CVE-2026-126279

An AI field prompt tooltip could expose a NocoDB editor’s session

NocoDB · AI field prompt editor

First documented disclosure · Review checkpoint

Summary

The tooltip rendered a stored field reference as HTML. Code in the tooltip could act as the viewing user or obtain their session token.

Severity and exploitation evidence

High · 7.0/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The tooltip rendered a stored field reference as HTML.

Conditions required

A Creator or higher role configured an AI prompt and another user opened that field’s configuration.

Potential impact

Code in the tooltip could act as the viewing user or obtain their session token.

Affected versions and configurations

Before 2026.06.2.

Fix and mitigation status

2026.06.2.

Practical next steps

Upgrade NocoDB to 2026.06.2 or later and review who may create AI fields.

Operating lesson

Render user-controlled prompt fields as plain text in administrative interfaces.

Evidence and limits

The CVE record was published on 2026-11-13.

Sources