CVE-2026-55411
Description
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.1780-lts, the authenticated endpoint POST /api/data-sources/decrypt returns the decrypted plaintext for any credential whose credential_id is supplied in the request body. Unlike every neighbouring data-source route, this handler is not protected by ValidateDataSourceGuard, does not receive the calling @User(), and the underlying CredentialsService.getValue() looks the credential up by id only, with no organization scoping. As a result, any authenticated user of any organization can decrypt the data-source secrets of any other organization by supplying that organization's credential_id — a cross-tenant confidentiality breach. This vulnerability is fixed in 3.20.1780-lts.
Summary dbcve.org
This is an IDOR (Insecure Direct Object Reference) vulnerability allowing cross-tenant data access. The POST /api/data-sources/decrypt endpoint accepts any credential_id without ValidateDataSourceGuard protection or organization scoping, enabling any authenticated user to decrypt data-source credentials from any organization by supplying the credential_id.
Mitigation
Upgrade to version 3.20.1780-lts or later. Until then, disable the vulnerable endpoint or implement temporary organization-level access controls to restrict decryption requests to the caller's organization.