The decrypted credential endpoint POST /api/data-sources/decrypt in ToolJet inadvertently exposes any credential's plaintext when a credential_id is supplied by a caller. Because the handler lacks organization scoping and fails to apply the ValidateDataSourceGuard, any authenticated user can retrieve the secrets of any other organization. This is an authorization bypass that results in cross‑tenant confidentiality exposure, classifying the flaw under CWE‑639 and CWE‑863.

ToolJet deployments running a version prior to 3.20.1780‑lts are affected. The vulnerability is present in the open‑source ToolJet platform and all instances exposing the decryption endpoint are susceptible.

With a CVSS score of 6.8 the flaw is considered medium severity. The lack of an EPSS score and the absence from CISA's KEV catalog suggest that exploitation is not widely documented, but the attack remains possible for any legitimate user with access to a ToolJet installation—there is no additional privileged privilege required. The vulnerability enables direct theft of sensitive credentials across organizational boundaries, increasing the potential impact if attackers gain authenticated access within an organization.