CVE-2026-114604

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-114604", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-21T20:34:25.599Z", "datePublished": "2026-11-05T20:37:39.814Z", "dateUpdated": "2026-11-09T18:37:52.147Z"}, "containers": {"cna": {"title": "GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments", "problemTypes": [{"descriptions": [{"cweId": "CWE-1321", "lang": "en", "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 8.4, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-c4qx-w738-7hr3", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-c4qx-w738-7hr3"}, {"name": "https://github.com/ardatan/graphql-tools/pull/8467", "tags": ["x_refsource_MISC"], "url": "https://github.com/ardatan/graphql-tools/pull/8467"}, {"name": "https://github.com/ardatan/graphql-tools/commit/19f5b3373fd7ace0688d19950fc529ce8347952a", "tags": ["x_refsource_MISC"], "url": "https://github.com/ardatan/graphql-tools/commit/19f5b3373fd7ace0688d19950fc529ce8347952a"}, {"name": "https://github.com/ardatan/graphql-tools/commit/20d36a5c6eb8fd5524420988e01a48618c450d70", "tags": ["x_refsource_MISC"], "url": "https://github.com/ardatan/graphql-tools/commit/20d36a5c6eb8fd5524420988e01a48618c450d70"}, {"name": "https://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.2"}], "affected": [{"vendor": "ardatan", "product": "graphql-tools", "versions": [{"version": ">= 10.10.1, < 12.0.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T20:37:39.814Z"}, "descriptions": [{"lang": "en", "value": "GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. From 10.10.1 until 12.0.2, the @graphql-tools/utils mergeIncrementalResult helper passes incrementalResult.path segments to setObjectKeyPath without runtime primitive-type validation. A non-primitive segment can bypass strict comparisons against __proto__, constructor, and prototype, then be coerced during property access so a malicious or compromised upstream incremental GraphQL response writes attacker-controlled properties to Object.prototype in the consuming Node.js process. The affected implementation is packages/utils/src/mergeIncrementalResult.ts and is reachable when consumers merge untrusted @defer or @stream transport results. This issue is fixed in version 12.0.2."}], "source": {"advisory": "GHSA-c4qx-w738-7hr3", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-c4qx-w738-7hr3", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T18:37:03.413717Z", "id": "CVE-2026-114604", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T18:37:52.147Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-114604", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-09T18:37:03.413717Z"}}}], "references": [{"url": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-c4qx-w738-7hr3", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T18:37:34.524Z"}}], "cna": {"title": "GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments", "source": {"advisory": "GHSA-c4qx-w738-7hr3", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW"}}], "affected": [{"vendor": "ardatan", "product": "graphql-tools", "versions": [{"status": "affected", "version": ">= 10.10.1, < 12.0.2"}]}], "references": [{"url": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-c4qx-w738-7hr3", "name": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-c4qx-w738-7hr3", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/ardatan/graphql-tools/pull/8467", "name": "https://github.com/ardatan/graphql-tools/pull/8467", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/ardatan/graphql-tools/commit/19f5b3373fd7ace0688d19950fc529ce8347952a", "name": "https://github.com/ardatan/graphql-tools/commit/19f5b3373fd7ace0688d19950fc529ce8347952a", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/ardatan/graphql-tools/commit/20d36a5c6eb8fd5524420988e01a48618c450d70", "name": "https://github.com/ardatan/graphql-tools/commit/20d36a5c6eb8fd5524420988e01a48618c450d70", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.2", "name": "https://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.2", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. From 10.10.1 until 12.0.2, the @graphql-tools/utils mergeIncrementalResult helper passes incrementalResult.path segments to setObjectKeyPath without runtime primitive-type validation. A non-primitive segment can bypass strict comparisons against __proto__, constructor, and prototype, then be coerced during property access so a malicious or compromised upstream incremental GraphQL response writes attacker-controlled properties to Object.prototype in the consuming Node.js process. The affected implementation is packages/utils/src/mergeIncrementalResult.ts and is reachable when consumers merge untrusted @defer or @stream transport results. This issue is fixed in version 12.0.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1321", "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T20:37:39.814Z"}}}, "cveMetadata": {"cveId": "CVE-2026-114604", "state": "PUBLISHED", "dateUpdated": "2026-11-09T18:37:52.147Z", "dateReserved": "2026-10-21T20:34:25.599Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-11-05T20:37:39.814Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "graphql-tools", "vendor": "ardatan", "versions": [{"status": "affected", "version": ">= 10.10.1, < 12.0.2"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. From 10.10.1 until 12.0.2, the @graphql-tools/utils mergeIncrementalResult helper passes incrementalResult.path segments to setObjectKeyPath without runtime primitive-type validation. A non-primitive segment can bypass strict comparisons against __proto__, constructor, and prototype, then be coerced during property access so a malicious or compromised upstream incremental GraphQL response writes attacker-controlled properties to Object.prototype in the consuming Node.js process. The affected implementation is packages/utils/src/mergeIncrementalResult.ts and is reachable when consumers merge untrusted @defer or @stream transport results. This issue is fixed in version 12.0.2."}], "id": "CVE-2026-114604", "lastModified": "2026-11-09T19:16:41.843", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-114604", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T18:37:03.413717Z", "version": "2.0.3"}}]}, "published": "2026-11-05T21:18:37.057", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/ardatan/graphql-tools/commit/19f5b3373fd7ace0688d19950fc529ce8347952a"}, {"source": "security-advisories@github.com", "url": "https://github.com/ardatan/graphql-tools/commit/20d36a5c6eb8fd5524420988e01a48618c450d70"}, {"source": "security-advisories@github.com", "url": "https://github.com/ardatan/graphql-tools/pull/8467"}, {"source": "security-advisories@github.com", "url": "https://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.2"}, {"source": "security-advisories@github.com", "url": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-c4qx-w738-7hr3"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/ardatan/graphql-tools/security/advisories/GHSA-c4qx-w738-7hr3"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1321"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "@graphql-tools/utils: @graphql-tools/utils: Prototype pollution via unvalidated incremental response path segments", "id": "2567593", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567593"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "status": "draft"}, "cwe": "CWE-915", "details": ["A flaw was found in @graphql-tools/utils. A remote attacker or compromised upstream GraphQL service can exploit this vulnerability by supplying crafted incremental response path segments during streaming or deferred GraphQL operations. Because the helper function fails to validate data types before checking property names, malicious values can bypass safety checks. This allows an attacker to modify global object properties (prototype pollution), potentially leading to application denial of service (DoS), configuration tampering, or unauthorized privilege escalation."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-114604", "package_state": [{"cpe": "cpe:/a:redhat:serverless:1", "fix_state": "Not affected", "package_name": "openshift-serverless-1/logic-rhel9-operator", "product_name": "OpenShift Serverless"}, {"cpe": "cpe:/a:redhat:rhdh:1", "fix_state": "Not affected", "package_name": "rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend", "product_name": "Red Hat Developer Hub 1"}, {"cpe": "cpe:/a:redhat:rhdh:1", "fix_state": "Not affected", "package_name": "rhdh/rhdh-hub-rhel9", "product_name": "Red Hat Developer Hub 1"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Not affected", "package_name": "rhoai/odh-mlflow-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift4/ose-console", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift4/ose-console-rhel9", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:5", "fix_state": "Not affected", "package_name": "openshift5/ose-console-rhel9", "product_name": "Red Hat OpenShift Container Platform 5"}, {"cpe": "cpe:/a:redhat:ansible_portal:2", "fix_state": "Not affected", "package_name": "ansible-automation-platform/automation-portal", "product_name": "Self-service automation portal 2"}, {"cpe": "cpe:/a:redhat:ansible_portal:2", "fix_state": "Not affected", "package_name": "ansible-automation-platform/bootc-automation-portal-rhel9", "product_name": "Self-service automation portal 2"}], "public_date": "2026-11-05T20:37:39Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-114604\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-114604\nhttps://github.com/ardatan/graphql-tools/commit/19f5b3373fd7ace0688d19950fc529ce8347952a\nhttps://github.com/ardatan/graphql-tools/commit/20d36a5c6eb8fd5524420988e01a48618c450d70\nhttps://github.com/ardatan/graphql-tools/pull/8467\nhttps://github.com/ardatan/graphql-tools/releases/tag/@graphql-tools/utils@12.0.2\nhttps://github.com/ardatan/graphql-tools/security/advisories/GHSA-c4qx-w738-7hr3"], "statement": "This vulnerability is rated as having an Important severity because successful exploitation allows a remote attacker or untrusted upstream service to inject properties into the global Object prototype, which can alter application logic, bypass authorization controls, or disrupt the Node.js runtime process. In Red Hat environments, the exposure is largely constrained to applications that utilize GraphQL Tools to aggregate or merge streaming or deferred response fragments from untrusted origins. If the service only communicates with fully trusted internal subgraphs or does not implement incremental delivery features, the risk of prototype tampering is significantly reduced.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[10.10.1,12.0.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "graphql-tools", "source": "cna", "vendor": "ardatan"}, "product": "graphql-tools", "vendor": "ardatan"}], "created": "2026-11-05T21:45:04.826402+00:00", "updated": "2026-11-06T14:30:06.073286+00:00", "vendors": ["ardatan", "ardatan$PRODUCT$graphql-tools"]}