CVE-2026-108745 Details

A missing authorization vulnerability has been identified in CloudBeaver versions through 25.3.5, specifically within the WebSQLResultServlet. This vulnerability enables any user with a web session to access and download large object (LOB) export files belonging to other users from a shared directory. The issue arises because the servlet lacks proper authorization checks, allowing unauthorized access to sensitive data. Exploitation involves guessing table and column names and manipulating timestamps to retrieve LOB values, including data from inaccessible connections.

The vulnerability can be addressed by adding authorization checks to the WebSQLResultServlet, ensuring that only authorized users can access the LOB export files. Additionally, implementing per-session folders with unpredictable filenames for LOB exports can prevent cross-user data access.