ToolJet prior to version 3.16.208 contains an authorization bypass flaw in its TooljetDB controller endpoints. The flaw allows an authenticated user to supply an arbitrary organizationId value in the URL path without the system validating that it matches the user’s workspace. Because the endpoint accepts any organizationId, the attacker can enumerate, create, rename, or delete tables in database sets that belong to other workspaces. This vulnerability is classified as CWE‑863 and permits the attacker to read, modify, or delete data that should be protected by workspace boundaries, but it does not provide a mechanism for remote code execution or elevated privileges beyond the authenticated account.

All ToolJet deployments running a version earlier than 3.16.208 that expose the TooljetDB controller endpoints are affected. This includes installations of the standard ToolJet product where the database API routes are available to users who have authenticated credentials.

The CVSS score of 5.1 indicates a moderate severity. Attackers only need to be authenticated to the ToolJet instance to act; compromised or legitimate user credentials provide the necessary base permission. An attacker can then send crafted HTTP requests with a forged organizationId to gain unauthorized access to other workspaces’ tables. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting there are no known widespread exploitation reports. Nevertheless, the entry point is simple and could be automated, so the risk remains significant for exposed ToolJet installations.