CVE-2026-72849 is a CSRF vulnerability affecting Budibase server versions before 3.40.0. The issue exists in the chat-link handoff endpoint, where an attacker can craft a phishing page that auto-submits a POST request containing a leaked confirmation token. This request binds the attacker's external chat identity to the victim's account, allowing impersonation and permission inheritance within agent operations. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Exploitation of this vulnerability allows an attacker to impersonate a victim user by binding their chat identity to the victim's account. This can lead to unauthorized actions within agent operations and the inheritance of the victim's permissions, potentially compromising the integrity and security of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious of phishing attempts that could exploit this CSRF vulnerability. Implementing additional CSRF protections or monitoring for suspicious chat identity bindings may help mitigate risk.