Multiple vulnerabilities have been identified in Budibase, an open-source low-code platform for creating internal applications such as management panels. These vulnerabilities affect versions earlier than 3.38.2. Four CVEs are associated with this issue: CVE-2026-46424, CVE-2026-46425, CVE-2026-46426, and CVE-2026-46427. No CVSS scores or detailed technical information are provided, and no known exploits have been reported. The vendor advisory from the Bundesamt für Sicherheit in der Informationstechnik does not include patch or mitigation details. The vulnerabilities impact the open-source Budibase product and are not related to a cloud service.

The vulnerabilities affect Budibase versions prior to 3.38.2 and could potentially impact the security of internal applications built using this platform. However, no specific impact details, exploit techniques, or consequences are described in the available data. No known exploits in the wild have been reported, indicating limited or no active exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory (WID-SEC-W-2026-1564) from the Bundesamt für Sicherheit in der Informationstechnik for current remediation guidance. Since no official fix or workaround information is provided, users should monitor for updates and apply any future patches promptly once available.