A vulnerability classified as critical was found in budibase up to 3.35.3. This affects an unknown part of the file /api/global/users/search?x=/api/system/status of the component Query Parameter Handler. Executing a manipulation can lead to improper authentication.
This vulnerability appears as CVE-2026-41428. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.
