Appsmithorg Appsmith

9 CVEs affecting Appsmithorg Appsmith. Latest disclosed: 2026-06-24. Critical: 5, High: 2.

Top CVEs affecting Appsmithorg Appsmith
CVESeverityScorePublishedSummary
CVE-2026-55454Critical9.92026-06-24Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bundled Caddy reverse-proxy's admin API — which has no authenti…
CVE-2026-22794Critical9.62026-01-12Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the server uses the Origin value from the request headers as the e…
CVE-2026-24042Critical9.42026-01-22Appsmith is a platform to build admin panels, internal tools, and dashboards. In versions 1.94 and below, publicly accessible apps allow unauthenticated users…
CVE-2026-55455Critical9.12026-06-24Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the outbound HTTP host filter applied by WebClientUtils (used by th…
CVE-2026-30862Critical9.02026-03-10Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.96, a Critical Stored XSS vulnerability exists in the Table Widget (Ta…
CVE-2026-5418High7.32026-04-02A vulnerability was identified in appsmithorg appsmith up to 1.97. Impacted is the function computeDisallowedHosts of the file app/server/appsmith-interfaces/s…
CVE-2026-50189High7.22026-06-24Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord exposes an XML-RPC interface on port…
CVE-2024-55604Medium4.32025-03-25Appsmith is a platform to build admin panels, internal tools, and dashboards. Users invited as "App Viewer" should not have access to development information o…
CVE-2026-49979Low2.72026-06-24Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.99, the POST /api/v1/admin/send-test-email endpoint accepts attacker-c…