A vulnerability labeled as critical has been found in appsmithorg appsmith up to 1.97. Impacted is the function
computeDisallowedHosts of the file app/server/appsmith-interfaces/src/main/java/com/appsmith/util/WebClientUtils.java of the component Dashboard. Such manipulation leads to server-side request forgery.
This vulnerability is traded as CVE-2026-5418. The attack may be launched remotely. Furthermore, there is an exploit available.
The affected component should be upgraded.
The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
