Information disclosure in Nocodb

CVE-2026-47379

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the shared-view password check fell back to strict-equality (===) comparison for legacy plaintext passwords, leaking the password's length and per-character pre…

Vulnerability class: Information Disclosure

EPSS: 0.003 (16.8th percentile) — read the EPSS interpretation.

Affected products

  • Nocodb — versions < 2026.05.1

Weakness classification (CWE)

References