CVE-2026-25044Published
Budibase: Command Injection in Bash Automation Step
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-25044 · Microsoft / collected KEV context
cve-program · CVE-2026-25044
- https://github.com/Budibase/budibase/security/advisories/GHSA-gjw9-34gf-rp6m
- https://github.com/Budibase/budibase/releases/tag/3.33.2
euvd · EUVD-2026-18754
- https://github.com/Budibase/budibase/security/advisories/GHSA-gjw9-34gf-rp6m
- https://github.com/Budibase/budibase/releases/tag/3.33.2
nvd · CVE-2026-25044
- https://github.com/Budibase/budibase/releases/tag/3.33.2
- https://github.com/Budibase/budibase/security/advisories/GHSA-gjw9-34gf-rp6m
osv · GHSA-gjw9-34gf-rp6m
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.