Vulnerability in Nocodb

CVE-2026-53926

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, revokeAllOAuthTokensByUser in the users service is an empty stub being called from passwordChange, passwordForgot, and passwordReset. OAuth access and refresh t…

EPSS: 0.003 (21.8th percentile) — read the EPSS interpretation.

Affected products

  • Nocodb — versions < 2026.05.1

Weakness classification (CWE)

References