CVE-2026-104852

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-104852", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-02T14:38:43.244Z", "datePublished": "2026-10-05T22:56:43.779Z", "dateUpdated": "2026-10-06T14:48:02.114Z"}, "containers": {"cna": {"title": "GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`", "problemTypes": [{"descriptions": [{"cweId": "CWE-1321", "lang": "en", "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-7mx3-vvmw-hjmv", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-7mx3-vvmw-hjmv"}, {"name": "https://github.com/ardatan/graphql-tools/pull/8423", "tags": ["x_refsource_MISC"], "url": "https://github.com/ardatan/graphql-tools/pull/8423"}, {"name": "https://github.com/graphql-hive/gateway/pull/2600", "tags": ["x_refsource_MISC"], "url": "https://github.com/graphql-hive/gateway/pull/2600"}, {"name": "https://github.com/ardatan/graphql-tools/commit/0b9529f1988fd36186a7c106a6efe0356f1b7f2e", "tags": ["x_refsource_MISC"], "url": "https://github.com/ardatan/graphql-tools/commit/0b9529f1988fd36186a7c106a6efe0356f1b7f2e"}, {"name": "https://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.1"}], "affected": [{"vendor": "ardatan", "product": "graphql-tools", "versions": [{"version": "< 12.0.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-05T22:56:43.779Z"}, "descriptions": [{"lang": "en", "value": "GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while recursively merging source objects and does not exclude __proto__, constructor, or prototype keys. An unauthenticated GraphQL client can alias fields to those names so responses from two subgraphs collide during ordinary supergraph result merging, causing mergeDeep to traverse Object and Function prototypes and overwrite Function.prototype.call with a subgraph-supplied value. This breaks subsequent requests in the process until restart. This issue is fixed in version 12.0.1."}], "source": {"advisory": "GHSA-7mx3-vvmw-hjmv", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-06T14:34:12.166588Z", "id": "CVE-2026-104852", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T14:48:02.114Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`", "source": {"advisory": "GHSA-7mx3-vvmw-hjmv", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}}], "affected": [{"vendor": "ardatan", "product": "graphql-tools", "versions": [{"status": "affected", "version": "< 12.0.1"}]}], "references": [{"url": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-7mx3-vvmw-hjmv", "name": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-7mx3-vvmw-hjmv", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/ardatan/graphql-tools/pull/8423", "name": "https://github.com/ardatan/graphql-tools/pull/8423", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/graphql-hive/gateway/pull/2600", "name": "https://github.com/graphql-hive/gateway/pull/2600", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/ardatan/graphql-tools/commit/0b9529f1988fd36186a7c106a6efe0356f1b7f2e", "name": "https://github.com/ardatan/graphql-tools/commit/0b9529f1988fd36186a7c106a6efe0356f1b7f2e", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.1", "name": "https://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while recursively merging source objects and does not exclude __proto__, constructor, or prototype keys. An unauthenticated GraphQL client can alias fields to those names so responses from two subgraphs collide during ordinary supergraph result merging, causing mergeDeep to traverse Object and Function prototypes and overwrite Function.prototype.call with a subgraph-supplied value. This breaks subsequent requests in the process until restart. This issue is fixed in version 12.0.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1321", "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-05T22:56:43.779Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-104852", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-06T14:34:12.166588Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-10-06T14:35:29.155Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-104852", "state": "PUBLISHED", "dateUpdated": "2026-10-05T22:56:43.779Z", "dateReserved": "2026-10-02T14:38:43.244Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-10-05T22:56:43.779Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "graphql-tools", "vendor": "ardatan", "versions": [{"status": "affected", "version": "< 12.0.1"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while recursively merging source objects and does not exclude __proto__, constructor, or prototype keys. An unauthenticated GraphQL client can alias fields to those names so responses from two subgraphs collide during ordinary supergraph result merging, causing mergeDeep to traverse Object and Function prototypes and overwrite Function.prototype.call with a subgraph-supplied value. This breaks subsequent requests in the process until restart. This issue is fixed in version 12.0.1."}], "id": "CVE-2026-104852", "lastModified": "2026-10-06T15:17:13.110", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-104852", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-06T14:34:12.166588Z", "version": "2.0.3"}}]}, "published": "2026-10-05T23:17:00.213", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/ardatan/graphql-tools/commit/0b9529f1988fd36186a7c106a6efe0356f1b7f2e"}, {"source": "security-advisories@github.com", "url": "https://github.com/ardatan/graphql-tools/pull/8423"}, {"source": "security-advisories@github.com", "url": "https://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.1"}, {"source": "security-advisories@github.com", "url": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-7mx3-vvmw-hjmv"}, {"source": "security-advisories@github.com", "url": "https://github.com/graphql-hive/gateway/pull/2600"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1321"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "@graphql-tools/utils: @graphql-tools/utils: Denial of Service (DoS) via prototype pollution in mergeDeep", "id": "2546183", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2546183"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-915", "details": ["A flaw was found in @graphql-tools/utils. The mergeDeep function fails to restrict sensitive object properties during recursive data merging, leading to prototype pollution, where fundamental JavaScript object definitions are modified. A remote, unauthenticated attacker can exploit this flaw by sending a crafted GraphQL query with aliased field names to trigger a collision during response merging. Successful exploitation overwrites internal runtime methods, resulting in a Denial of Service (DoS) that prevents the application from handling subsequent requests until restarted."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-104852", "package_state": [{"cpe": "cpe:/a:redhat:rhdh:1", "fix_state": "Affected", "package_name": "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend", "product_name": "Red Hat Developer Hub"}, {"cpe": "cpe:/a:redhat:rhdh:1", "fix_state": "Affected", "package_name": "rhdh/rhdh-hub-rhel9", "product_name": "Red Hat Developer Hub"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-mlflow-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "openshift4/ose-console", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "openshift4/ose-console-rhel9", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:ansible_portal:2", "fix_state": "Affected", "package_name": "ansible-automation-platform/automation-portal", "product_name": "Self-service automation portal 2"}, {"cpe": "cpe:/a:redhat:ansible_portal:2", "fix_state": "Affected", "package_name": "ansible-automation-platform/bootc-automation-portal-rhel9", "product_name": "Self-service automation portal 2"}], "public_date": "2026-10-05T22:56:43Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-104852\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-104852\nhttps://github.com/ardatan/graphql-tools/commit/0b9529f1988fd36186a7c106a6efe0356f1b7f2e\nhttps://github.com/ardatan/graphql-tools/pull/8423\nhttps://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.1\nhttps://github.com/ardatan/graphql-tools/security/advisories/GHSA-7mx3-vvmw-hjmv\nhttps://github.com/graphql-hive/gateway/pull/2600"], "statement": "This vulnerability is rated as Important because an unauthenticated remote attacker can trigger prototype pollution to disrupt service availability, causing the Node.js process to fail on subsequent requests until restarted. In Red Hat environments, affected components such as OpenShift Container Platform console and Red Hat Developer Hub bundle this library for schema and response handling. Although the failure impacts process availability, exploitation requires conditions where federated subgraph responses containing malicious property names are merged, and the vulnerability does not directly expose confidential data or permit arbitrary code execution.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,12.0.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "graphql-tools", "source": "cna", "vendor": "ardatan"}, "product": "graphql-tools", "vendor": "ardatan"}], "created": "2026-10-06T00:30:18.127624+00:00", "updated": "2026-10-07T07:45:14.227785+00:00", "vendors": ["ardatan", "ardatan$PRODUCT$graphql-tools"]}