CVE-2026-35413

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-35413", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-02T17:03:42.075Z", "datePublished": "2026-04-06T21:34:32.683Z", "dateUpdated": "2026-04-08T14:05:44.361Z"}, "containers": {"cna": {"title": "Directus GraphQL Schema SDL Disclosure Setting", "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "lang": "en", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/directus/directus/security/advisories/GHSA-wxwm-3fxv-mrvx", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/directus/directus/security/advisories/GHSA-wxwm-3fxv-mrvx"}], "affected": [{"vendor": "directus", "product": "directus", "versions": [{"version": "< 11.16.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-06T21:34:32.683Z"}, "descriptions": [{"lang": "en", "value": "Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, when GRAPHQL_INTROSPECTION=false is configured, Directus correctly blocks standard GraphQL introspection queries (__schema, __type). However, the server_specs_graphql resolver on the /graphql/system endpoint returns an equivalent SDL representation of the schema and was not subject to the same restriction. This allowed the introspection control to be bypassed, exposing schema structure (collection names, field names, types, and relationships) to unauthenticated users at the public permission level, and to authenticated users at their permitted permission level. This vulnerability is fixed in 11.16.1."}], "source": {"advisory": "GHSA-wxwm-3fxv-mrvx", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-08T14:05:28.658796Z", "id": "CVE-2026-35413", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-08T14:05:44.361Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-35413", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-08T14:05:28.658796Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-08T14:05:40.492Z"}}], "cna": {"title": "Directus GraphQL Schema SDL Disclosure Setting", "source": {"advisory": "GHSA-wxwm-3fxv-mrvx", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "directus", "product": "directus", "versions": [{"status": "affected", "version": "< 11.16.1"}]}], "references": [{"url": "https://github.com/directus/directus/security/advisories/GHSA-wxwm-3fxv-mrvx", "name": "https://github.com/directus/directus/security/advisories/GHSA-wxwm-3fxv-mrvx", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, when GRAPHQL_INTROSPECTION=false is configured, Directus correctly blocks standard GraphQL introspection queries (__schema, __type). However, the server_specs_graphql resolver on the /graphql/system endpoint returns an equivalent SDL representation of the schema and was not subject to the same restriction. This allowed the introspection control to be bypassed, exposing schema structure (collection names, field names, types, and relationships) to unauthenticated users at the public permission level, and to authenticated users at their permitted permission level. This vulnerability is fixed in 11.16.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-06T21:34:32.683Z"}}}, "cveMetadata": {"cveId": "CVE-2026-35413", "state": "PUBLISHED", "dateUpdated": "2026-04-08T14:05:44.361Z", "dateReserved": "2026-04-02T17:03:42.075Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-04-06T21:34:32.683Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "directus", "vendor": "directus", "versions": [{"status": "affected", "version": "< 11.16.1"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "E86A8769-F082-4253-9D48-B6B484CA61FF", "versionEndExcluding": "11.16.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, when GRAPHQL_INTROSPECTION=false is configured, Directus correctly blocks standard GraphQL introspection queries (__schema, __type). However, the server_specs_graphql resolver on the /graphql/system endpoint returns an equivalent SDL representation of the schema and was not subject to the same restriction. This allowed the introspection control to be bypassed, exposing schema structure (collection names, field names, types, and relationships) to unauthenticated users at the public permission level, and to authenticated users at their permitted permission level. This vulnerability is fixed in 11.16.1."}, {"lang": "es", "value": "Directus es un API en tiempo real y panel de control de aplicaciones para gestionar contenido de bases de datos SQL. Antes de 11.16.1, cuando GRAPHQL_INTROSPECTION=false est\u00e1 configurado, Directus bloquea correctamente las consultas de introspecci\u00f3n GraphQL est\u00e1ndar (__schema, __type). Sin embargo, el resolvedor server_specs_graphql en el endpoint /graphql/system devuelve una representaci\u00f3n SDL equivalente del esquema y no estaba sujeto a la misma restricci\u00f3n. Esto permiti\u00f3 que se eludiera el control de introspecci\u00f3n, exponiendo la estructura del esquema (nombres de colecciones, nombres de campos, tipos y relaciones) a usuarios no autenticados en el nivel de permiso p\u00fablico, y a usuarios autenticados en su nivel de permiso permitido. Esta vulnerabilidad est\u00e1 corregida en 11.16.1."}], "id": "CVE-2026-35413", "lastModified": "2026-07-24T21:10:00.143", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35413", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-08T14:05:28.658796Z", "version": "2.0.3"}}]}, "published": "2026-04-06T22:16:22.540", "references": [{"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/directus/directus/security/advisories/GHSA-wxwm-3fxv-mrvx"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,11.16.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "directus", "source": "cna", "vendor": "directus"}, "product": "directus", "vendor": "directus"}], "analysis": {"en": {"generated_at": "2026-04-20T20:47:09.675239+00:00", "value": {"mitigation_remediation": ["Update Directus to version 11.16.1 or later to fix the schema discovery flaw.", "If an upgrade is not yet possible, set GRAPHQL_INTROSPECTION to true so that all schema queries are blocked.", "Restrict network access to the /graphql/system endpoint or disable the server_specs_graphql resolver if not required for your operations."], "summary": {"action": "Patch", "impact": "Information Disclosure"}, "threat_synthesis": {"affected_systems": "Any Directus installation running a version earlier than 11.16.1 and having the GRAPHQL_INTROSPECTION configuration set to false is vulnerable. The flaw lives in the component that serves the /graphql/system endpoint and affects all deployments that expose the GraphQL API. Both unauthenticated visitors and users with GraphQL permissions can trigger the disclosure.", "description_and_impact": "Directus is a real\u2011time API and dashboard for managing SQL databases. An earlier release than 11.16.1 contains a logic error that lets an attacker bypass the GRAPHQL_INTROSPECTION setting. The server_specs_graphql resolver, exposed on the /graphql/system endpoint, returns the full SDL representation of the GraphQL schema even when introspection queries are disabled. This reveals collection names, field names, types and relationships to unauthenticated users at the public permission level and to authenticated users at their permitted level, constituting an information disclosure that can assist in further attacks.", "risk_and_exploitability": "The CVSS score of 5.3 reflects moderate severity. With an EPSS score of less than 1\u202f% the vulnerability is considered low probability of exploitation. It is not included in the CISA KEV catalog. Exploitation is straightforward: an attacker needs network access to the Directus instance\u2019s /graphql/system endpoint and can retrieve the schema by issuing a simple request. Because the data disclosed consists of the schema\u2019s structural information rather than actual content, the immediate confidentiality impact is limited, yet it can aid attackers in mapping the internal data model and planning subsequent attacks such as injection or privilege escalation."}}}}, "created": "2026-04-07T06:53:47.014198+00:00", "updated": "2026-04-20T21:00:12.912656+00:00", "vendors": ["directus", "directus$PRODUCT$directus"]}