Budibase OIDC/SSO Auth Bypass Lets Attacker Claim Admin Invite — CVE-2026-100684

A critical authentication bypass in the Budibase low-code platform allows unauthenticated remote attackers to hijack pending administrative invitations. By exploiting flaws in the OIDC/SSO login flow, an attacker can claim an invite…