CVE-2024-58394 in Retool
Summary
by MITRE • 10/22/2026
Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scripts by proxying malicious SVG files through /api/imageProxy. Attackers can supply an attacker-hosted SVG in the url parameter, which is served from the Retool origin without a Content Security Policy, executing JavaScript in victims' sessions. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-10-15.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 10/22/2026
Retool versions prior to 3.88.0 are susceptible to a critical cross-site scripting vulnerability that stems from insufficient input validation and sanitization within the image proxying mechanism. The core technical flaw resides in the /api/imageProxy endpoint, which is designed to fetch external resources for display purposes but fails to adequately sanitize or restrict the content types of fetched assets. Specifically, when an attacker supplies a URL pointing to a maliciously crafted SVG file hosted on their own server, the Retool application retrieves this resource and serves it back through its origin without applying necessary security controls such as Content Security Policy headers that would otherwise prevent script execution. This architectural oversight allows the browser to interpret the returned content not merely as an image but as executable JavaScript code within the context of the victim's active session.
The operational impact of this vulnerability is severe because it enables unauthenticated attackers to execute arbitrary scripts in the browsers of legitimate users interacting with the Retool platform. Since the malicious SVG file is served from the trusted Retool origin, it bypasses same-origin policy restrictions and gains full access to sensitive application data, cookies, session tokens, and local storage associated with that domain. This capability allows threat actors to perform account takeover by stealing authentication credentials, conduct phishing attacks within the context of a trusted enterprise tool, or pivot further into internal networks if the Retool instance has integrations with other systems. The lack of Content Security Policy enforcement on this specific endpoint removes a critical layer of defense-in-depth that would typically mitigate such script injection attempts.
Exploitation evidence for this vulnerability was first observed in the wild by the Shadowserver Foundation on October 15, 2024, indicating active exploitation against unpatched instances. This real-world activity underscores the urgency for immediate remediation. The attack vector aligns with CWE-79 Improper Neutralization of Input During Web Page Generation commonly known as Cross-site Scripting and maps to MITRE ATT&CK technique T1059 Command and Control via Application Layer Protocol, specifically leveraging legitimate application functionality to deliver malicious payloads without triggering typical security alerts due to the trusted origin.
To mitigate this risk, organizations must immediately upgrade Retool to version 3.88.0 or later where these input validation checks have been strengthened. In addition to patching, administrators should implement strict Content Security Policy headers for all API endpoints, particularly those handling external resource fetching, to restrict script execution sources and prevent inline scripts from running even if injected. Network-level controls such as web application firewalls can also be configured to detect and block requests containing suspicious SVG payloads or unusual URL parameters targeting the image proxy endpoint until patches are fully deployed across the environment.