CVE-2026-118685

    Dashboard / Vulnerabilities / CVE-2026-118685

    CVE-2026-118685

    Published: 28 Oct 2026Last Modified: 4 Nov 2026

    Summary: ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard

    Details: ToolJet from 3.20.2-lts before 3.20.242-lts contains an authorization bypass in SignupDisableGuard, which treats the string signup setting 'false' as truthy, so instance-level signup restrictions are not enforced. Unauthenticated attackers can send POST requests to /api/signup without an organizationId to create an account, join the default workspace, and receive a valid session.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/118xxx/CVE-2026-118685.json, https://github.com/ToolJet/ToolJet/security/advisories/GHSA-gwr6-mv6v-23f2, https://nvd.nist.gov/vuln/detail/CVE-2026-118685, https://www.vulncheck.com/advisories/tooljet-3.20.2-lts-before-3.20.242-lts-signup-bypass-via-signupdisableguard, https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gg3p-r4g8-vxg2

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 674d0199e46e352d32dfa4bdf400cebe3508e634
    Fixed -d33cd0cb80f76934e501fb8805952c7891b836a7

    Affected versions

    v3.20.236-lts
    v3.20.241-lts
    v3.20.240-lts
    v3.20.239-lts
    v3.20.238-lts
    v3.20.237-lts
    v3.20.234-lts
    v3.20.235-lts
    v3.20.233-lts
    v3.20.232-lts
    v3.20.231-lts
    v3.20.230-lts
    v3.20.229-lts
    v3.20.228-lts
    v3.20.227-lts
    v3.20.226-lts
    v3.20.210-lts
    v3.20.222-lts
    v3.20.225-lts
    v3.20.224-lts
    v3.20.223-lts
    v3.20.221-lts
    v3.20.220-lts
    v3.20.219-lts
    v3.20.218-lts
    v3.20.216-lts
    v3.20.215-lts
    v3.20.217-lts
    v3.20.214-lts
    v3.20.213-lts
    v3.20.212-lts
    v3.20.211-lts
    v3.20.208-lts
    v3.20.209-lts
    v3.20.207-lts
    v3.20.206-lts
    v3.20.205-lts
    v3.20.204-lts
    v3.20.203-lts
    v3.20.202-lts
    v3.20.201-lts
    v3.20.200-lts
    v3.20.199-lts
    v3.20.198-lts
    v3.20.196-lts
    v3.20.197-lts
    v3.20.195-lts
    v3.20.194-lts
    v3.20.193-lts
    v3.20.192-lts
    v3.20.190-lts
    v3.20.191-lts
    v3.20.188-lts
    v3.20.189-lts
    v3.20.187-lts
    v3.20.186-lts
    v3.20.185-lts
    v3.20.184-lts
    v3.20.183-lts
    v3.20.182-lts
    v3.20.181-lts
    v3.20.180-lts
    v3.20.179-lts
    v3.20.178-lts
    v3.20.177-lts
    v3.20.176-lts
    v3.20.175-lts
    v3.20.174-lts
    v3.20.173-lts
    v3.20.172-lts
    v3.20.171-lts
    v3.20.168-lts
    v3.20.170-lts
    v3.20.169-lts
    v3.20.167-lts
    v3.20.166-lts
    v3.20.165-lts
    v3.20.164-lts
    v3.20.163-lts
    v3.20.162-lts
    v3.20.161-lts
    v3.20.160-lts
    v3.20.159-lts
    v3.20.158-lts
    v3.20.157-lts
    v3.20.156-lts
    v3.20.155-lts
    v3.20.154-lts
    v3.20.153-lts
    v3.20.152-lts
    v3.20.151-lts
    v3.20.150-lts
    v3.20.149-lts
    v3.20.148-lts
    v3.20.147-lts
    v3.20.146-lts
    v3.20.145-lts
    v3.20.144-lts
    v3.20.143-lts
    v3.20.142-lts
    v3.20.141-lts
    v3.20.138-lts
    v3.20.140-lts
    v3.20.139-lts
    v3.20.137-lts
    v3.20.136-lts
    v3.20.133-lts
    v3.20.135-lts
    v3.20.134-lts
    v3.20.132-lts
    v3.20.131-lts
    v3.20.130-lts
    v3.20.129-lts
    v3.20.127-lts
    v3.20.128-lts
    v3.20.126-lts
    v3.20.125-lts
    v3.20.124-lts
    v3.20.123-lts
    v3.20.122-lts
    v3.20.113-lts
    v3.20.121-lts
    v3.20.120-lts
    v3.20.119-lts
    v3.20.118-lts
    v3.20.109-lts
    v3.20.117-lts
    v3.20.116-lts
    v3.20.115-lts
    v3.20.101-lts
    v3.20.114-lts
    v3.20.111-lts
    v3.20.112-lts
    v3.20.110-lts
    v3.20.106-lts
    v3.20.108-lts
    v3.20.107-lts
    v3.20.105-lts
    v3.20.104-lts
    v3.20.103-lts
    v3.20.102-lts
    v3.20.100-lts
    v3.20.99-lts
    v3.20.98-lts
    v3.20.97-lts
    v3.20.96-lts
    v3.20.95-lts
    v3.20.94-lts
    v3.20.84-lts
    v3.20.92-lts
    v3.20.93-lts
    v3.20.91-lts
    v3.20.90-lts
    v3.20.88-lts
    v3.20.89-lts
    v3.20.87-lts
    v3.20.86-lts
    v3.20.85-lts
    v3.20.83-lts
    v3.20.82-lts
    v3.20.81-lts
    v3.20.80-lts
    v3.20.79-lts
    v3.20.78-lts
    v3.20.77-lts
    v3.20.75-lts
    v3.20.74-lts
    v3.20.73-lts
    v3.20.72-lts
    v3.20.71-lts
    v3.20.70-lts
    v3.20.69-lts
    v3.20.68-lts
    v3.20.67-lts
    v3.20.66-lts
    v3.20.65-lts
    v3.20.64-lts
    v3.20.63-lts
    v3.20.59-lts
    v3.20.62-lts
    v3.20.60-lts
    v3.20.61-lts
    v3.20.53-lts
    v3.20.58-lts
    v3.20.57-lts
    v3.20.56-lts
    v3.20.55-lts
    v3.20.54-lts
    v3.20.52-lts
    v3.20.51-lts
    v3.20.50-lts
    v3.20.49-lts
    v3.20.48-lts
    v3.20.47-lts
    v3.20.46-lts
    v3.20.35-lts
    v3.20.45-lts
    v3.20.43-lts
    v3.20.44-lts
    v3.20.42-lts
    v3.20.41-lts
    v3.20.40-lts
    v3.20.39-lts
    v3.20.38-lts
    v3.20.37-lts
    v3.20.36-lts
    v3.20.34-lts
    v3.20.33-lts
    v3.20.32-lts
    v3.20.31-lts
    v3.20.30-lts
    v3.20.29-lts
    v3.20.28-lts
    v3.20.26-lts
    v3.20.27-lts
    v3.20.25-lts
    v3.20.24-lts
    v3.20.23-lts
    v3.20.14-lts
    v3.20.22-lts
    v3.20.21-lts
    v3.20.20-lts
    v3.20.19-lts
    v3.20.17-lts
    v3.20.18-lts
    v3.20.16-lts
    v3.20.10-lts
    v3.20.15-lts
    v3.20.13-lts
    v3.20.12-lts
    v3.20.11-lts
    v3.20.9-lts
    v3.20.8-lts
    v3.20.7-lts
    v3.20.6-lts
    v3.20.5-lts
    v3.20.4-lts
    v3.20.3-lts
    v3.20.2-lts

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-118685 | CVE-DB