ToolJet’s server-side database API fails to verify that an authenticated caller belongs to the organization specified in the URL path, enabling a user to read and modify another organization’s tables. The vulnerability is a classic case of broken access control (CWE-639) that allows disclosure of table names, schemas, and data, as well as creation, alteration, bulk population, or deletion of tables across tenant boundaries. The impact is the potential loss of confidentiality and integrity of data stored by other organizations within the same ToolJet instance.

All installations of ToolJet prior to version 3.20.207-lts are affected. Any authenticated user, regardless of organizational membership, can target the API endpoints GET /api/tooljet-db/organizations/:organizationId/tables, GET /api/tooljet-db/organizations/:organizationId/table/:tableName, POST /api/tooljet-db/organizations/:organizationId/join, and related table‑management routes by setting the tj‑workspace‑id header to their own workspace while specifying another organization’s ID.

The CVSS score of 5.9 indicates a moderate severity, and no EPSS score is available, so the likelihood of exploitation cannot be quantified. Because the flaw requires authentication, the attack vector is internal, typically from users who have legitimate access to the ToolJet instance. The vulnerability is not listed in the CISA KEV catalog, suggesting no current widespread exploitation. However, the potential for cross‑tenant data exposure poses a significant business risk for organizations that host multiple tenants on a single ToolJet instance.