A vulnerability in the AuthService.validateUser function of NocoDB's sign‑in endpoint allows an attacker to manipulate the 'salt' parameter and cause the service to disclose sensitive information. The flaw can be leveraged remotely and leads to a confidentiality breach, exposing potentially privileged data that should not be publicly accessible. It does not allow code execution or denial of service, but the exposure of user credentials or other internal data can be detrimental to the affected organization.

The affected product is NocoDB, specifically all releases up to and including 2026.07.0. The vulnerability resides in the AuthService.validateUser component of the sign‑in endpoint.

The CVSS score of 6.3 classifies the flaw as medium severity. The EPSS score is not available, indicating no publicly known exploitation frequency yet, and the vulnerability is not listed in CISA's KEV catalog. However, the attack vector is remote and the complexity is high but considered difficult to exploit, suggesting that while the risk is moderate, the likelihood of successful exploitation in the wild is low but not negligible. Organizations should assess the potential impact of information exposure and the exposure of sensitive data within their deployment of NocoDB.