Vulnerabilities in dgraph-io
10 resultsCVE-2026-41492CRITICALUnauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in DgraphEPSS 3.1%CVE-2026-34976CRITICALDgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing AuthorizationEPSS 2.1%CVE-2026-102748CRITICALDgraph: Zero Unauthenticated HTTP Admin removeNode Denial of ServiceEPSS 0.6%CVE-2026-44840HIGHDgraph Vulnerable to DQL Injection via checkUserPassword GraphQL QueryEPSS 0.5%CVE-2026-40173CRITICALDgraph: Unauthenticated pprof endpoint leaks admin auth tokenEPSS 0.5%CVE-2026-41327CRITICALDgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition FieldEPSS 0.5%CVE-2026-54061CRITICALDgraph Alpha group stores can be replaced via unauthenticated external snapshot importEPSS 0.5%CVE-2026-41328CRITICALDgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang FieldEPSS 0.4%CVE-2026-63637HIGHDgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriterEPSS 0.4%CVE-2023-31135LOWDgraph Audit Log Encryption nonce reuseEPSS 0.2%