CVE-2026-73617 | Budibase up to 3.39.x MongoDB Datasource Integration data query logic injection

A vulnerability was found in Budibase up to 3.39.x. It has been declared as critical. This affects an unknown part of the component MongoDB Datasource Integration. Such manipulation leads to improper neutralization of special elements in data query logic.

This vulnerability is uniquely identified as CVE-2026-73617. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.