NocoDB versions prior to 0.301.3 stored shared view passwords in plaintext within the database. Password verification was done using direct string comparison without hashing. This vulnerability allows anyone with database access to read shared view passwords directly, posing a risk especially if users reuse passwords elsewhere. A fix is available in version 0.301.3.