A flaw exists in the marketplace plugin handling of ToolJet that lets an authenticated builder‑role user overwrite a globally shared plugin with arbitrary JavaScript. That code executes server‑side with full Node.js privileges, granting the attacker capability to run commands, read and modify files, and potentially modify other plugins or configurations. The weakness is an improper trust of plugin content (CWE‑94), leading to complete compromise of the deployed instance whenever any user triggers the plugin.

ToolJet versions prior to 3.20.178‑lts are vulnerable. The vulnerability applies to all installations of the open‑source ToolJet platform where marketplace plugins are enabled and a user holds a builder‑role account. Versions 3.20.178‑lts and later contain the fix.

The CVSS score of 9.4 rates this as critical, and while an EPSS value is not published, the lack of a KEV listing does not reduce the risk; the exploit requires only authenticated access as a builder user, a role commonly available in many deployments. A malicious user can overwrite a plugin that is shared across the instance, allowing the arbitrary code to execute whenever any user loads the plugin, effectively providing remote code execution and supply‑chain compromise for the entire ToolJet deployment.