CVE-2026-82244

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

August 29, 2026

Last Seen

August 30, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in Budibase Affects Versions Before 3.41.370.5

Budibase versions prior to 3.41.3 have a critical remote code execution vulnerability (CVE-2026-82244) affecting plugin handling. This flaw allows authenticated admin users to upload malicious plugin tarballs, executing arbitrary code due to the server's use of eval() on un-sandboxed JavaScript file...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerability in Budibase Affects Versions Before 3.41.3

Aug 29·2 sources

Related Articles (3)

CVE-2026-82244 - OSV

Osv.Dev·Aug 30

CVE-2026-82244: Budibase before 3.41.3 Remote Code Execution via Plugin eval() [CRITICAL] CVSS 9.4 Exploit Intelligence - Recent CVEs / 1d Budibase versions before 3.41.3 contain a remote code execution vulnerability in plugin handling that allows authenticated admin users to execute arbitrary code by uploading a malicious plugin tarball. The server calls eval() on plugin JavaScript files without sandboxing in the main Node.js process, enabling attackers to exfiltrate environment variables and c

exploit-intel.com·Aug 29

CVE-2026-82244 - Exploits & Severity

Related Entities

Zero-day Exploit CWE-94 - Code Injection T1059.007 - JavaScript T1041 - Exfiltration Over C2 Channel Budibase Node.js