A vulnerability marked as problematic has been reported in Budibase up to 3.39.x . This affects an unknown function of the component Chat-Link Handoff Endpoint . Performing a manipulation results in cross-site request forgery. This vulnerability is known as CVE-2026-72849 . Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.