CVE-2026-41328

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-41328", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-20T14:01:46.672Z", "datePublished": "2026-04-24T18:25:43.894Z", "dateUpdated": "2026-04-24T19:57:59.743Z"}, "containers": {"cna": {"title": "Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field", "problemTypes": [{"descriptions": [{"cweId": "CWE-943", "lang": "en", "description": "CWE-943: Improper Neutralization of Special Elements in Data Query Logic", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4"}], "affected": [{"vendor": "dgraph-io", "product": "dgraph", "versions": [{"version": "< 25.3.3", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-24T18:25:43.894Z"}, "descriptions": [{"lang": "en", "value": "Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full read access to every piece of data in the database. This affects Dgraph's default configuration where ACL is not enabled. The attack requires two HTTP POSTs to port 8080. The first sets up a schema predicate with @unique @index(exact) @lang via /alter (also unauthenticated in default config). The second sends a crafted JSON mutation to /mutate?commitNow=true where a JSON key contains the predicate name followed by @ and a DQL injection payload in the language tag position. The injection exploits the addQueryIfUnique function in edgraph/server.go, which constructs DQL queries using fmt.Sprintf with unsanitized predicateName that includes the raw pred.Lang value. The Lang field is extracted from JSON mutation keys by x.PredicateLang(), which splits on @, and is never validated by any function in the codebase. The attacker injects a closing parenthesis to escape the eq() function, adds an arbitrary named query block, and uses a # comment to neutralize trailing template syntax. The injected query executes server-side and its results are returned in the HTTP response. This vulnerability is fixed in 25.3.3."}], "source": {"advisory": "GHSA-x92x-px7w-4gx4", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-24T19:57:33.326072Z", "id": "CVE-2026-41328", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-24T19:57:59.743Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-41328", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-20T14:01:46.672Z", "datePublished": "2026-04-24T18:25:43.894Z", "dateUpdated": "2026-04-24T19:57:59.743Z"}, "containers": {"cna": {"title": "Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field", "problemTypes": [{"descriptions": [{"cweId": "CWE-943", "lang": "en", "description": "CWE-943: Improper Neutralization of Special Elements in Data Query Logic", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4"}], "affected": [{"vendor": "dgraph-io", "product": "dgraph", "versions": [{"version": "< 25.3.3", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-24T18:25:43.894Z"}, "descriptions": [{"lang": "en", "value": "Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full read access to every piece of data in the database. This affects Dgraph's default configuration where ACL is not enabled. The attack requires two HTTP POSTs to port 8080. The first sets up a schema predicate with @unique @index(exact) @lang via /alter (also unauthenticated in default config). The second sends a crafted JSON mutation to /mutate?commitNow=true where a JSON key contains the predicate name followed by @ and a DQL injection payload in the language tag position. The injection exploits the addQueryIfUnique function in edgraph/server.go, which constructs DQL queries using fmt.Sprintf with unsanitized predicateName that includes the raw pred.Lang value. The Lang field is extracted from JSON mutation keys by x.PredicateLang(), which splits on @, and is never validated by any function in the codebase. The attacker injects a closing parenthesis to escape the eq() function, adds an arbitrary named query block, and uses a # comment to neutralize trailing template syntax. The injected query executes server-side and its results are returned in the HTTP response. This vulnerability is fixed in 25.3.3."}], "source": {"advisory": "GHSA-x92x-px7w-4gx4", "discovery": "UNKNOWN"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-41328", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-24T19:57:33.326072Z"}}}], "references": [{"url": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-24T19:57:54.586Z"}}]}}

{"affected": [{"affectedData": [{"product": "dgraph", "vendor": "dgraph-io", "versions": [{"status": "affected", "version": "< 25.3.3"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dgraph:dgraph:*:*:*:*:*:go:*:*", "matchCriteriaId": "03E6E13D-4051-49C6-BDFB-3B66E2002401", "versionEndExcluding": "25.3.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full read access to every piece of data in the database. This affects Dgraph's default configuration where ACL is not enabled. The attack requires two HTTP POSTs to port 8080. The first sets up a schema predicate with @unique @index(exact) @lang via /alter (also unauthenticated in default config). The second sends a crafted JSON mutation to /mutate?commitNow=true where a JSON key contains the predicate name followed by @ and a DQL injection payload in the language tag position. The injection exploits the addQueryIfUnique function in edgraph/server.go, which constructs DQL queries using fmt.Sprintf with unsanitized predicateName that includes the raw pred.Lang value. The Lang field is extracted from JSON mutation keys by x.PredicateLang(), which splits on @, and is never validated by any function in the codebase. The attacker injects a closing parenthesis to escape the eq() function, adds an arbitrary named query block, and uses a # comment to neutralize trailing template syntax. The injected query executes server-side and its results are returned in the HTTP response. This vulnerability is fixed in 25.3.3."}, {"lang": "es", "value": "Dgraph es una base de datos GraphQL distribuida de c\u00f3digo abierto. Antes de la versi\u00f3n 25.3.3, se ha encontrado una vulnerabilidad en Dgraph que otorga a un atacante no autenticado acceso de lectura completo a cada pieza de datos en la base de datos. Esto afecta la configuraci\u00f3n predeterminada de Dgraph donde ACL no est\u00e1 habilitado. El ataque requiere dos solicitudes HTTP POST al puerto 8080. La primera configura un predicado de esquema con @unique @index(exact) @lang a trav\u00e9s de /alter (tambi\u00e9n no autenticado en la configuraci\u00f3n predeterminada). La segunda env\u00eda una mutaci\u00f3n JSON manipulada a /mutate?commitNow=true donde una clave JSON contiene el nombre del predicado seguido de @ y una carga \u00fatil de inyecci\u00f3n DQL en la posici\u00f3n de la etiqueta de idioma. La inyecci\u00f3n explota la funci\u00f3n addQueryIfUnique en edgraph/server.go, que construye consultas DQL usando fmt.Sprintf con un predicateName no saneado que incluye el valor pred.Lang sin procesar. El campo Lang es extra\u00eddo de las claves de mutaci\u00f3n JSON por x.PredicateLang(), que divide por @, y nunca es validado por ninguna funci\u00f3n en la base de c\u00f3digo. El atacante inyecta un par\u00e9ntesis de cierre para escapar de la funci\u00f3n eq(), a\u00f1ade un bloque de consulta con nombre arbitrario y utiliza un comentario # para neutralizar la sintaxis de plantilla restante. La consulta inyectada se ejecuta en el lado del servidor y sus resultados se devuelven en la respuesta HTTP. Esta vulnerabilidad est\u00e1 corregida en 25.3.3."}], "id": "CVE-2026-41328", "lastModified": "2026-11-11T23:10:00.263", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41328", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-24T19:57:33.326072Z", "version": "2.0.3"}}]}, "published": "2026-04-24T19:17:12.553", "references": [{"source": "security-advisories@github.com", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "url": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "url": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-x92x-px7w-4gx4"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-943"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,25.3.3)"}}], "enrichment": {"confidence": 90.0, "confidence_source": "matching", "scores": [{"score": 90.0, "source": "matching"}]}, "original": {"product": "dgraph", "source": "cna", "vendor": "dgraph-io"}, "product": "dgraph", "vendor": "dgraph"}], "analysis": {"en": {"generated_at": "2026-04-28T05:54:21.597196+00:00", "value": {"mitigation_remediation": ["Apply the vendor\u2011supplied patch by upgrading Dgraph to version 25.3.3 or later.", "If an upgrade cannot be performed immediately, enable Dgraph\u2019s Access Control Lists so that all API endpoints require authentication.", "Limit network exposure of port 8080 to trusted hosts or networks to eliminate unauthenticated access."], "summary": {"action": "Immediate Patch", "impact": "Full Database Exfiltration"}, "threat_synthesis": {"affected_systems": "Vendors and products affected are Dgraph\u2011IO\u2019s Dgraph database, specifically any deployment running a version prior to 25.3.3. The vulnerability is tied to the default configuration where access control lists are disabled, so any instance exposed on port 8080 without authentication is susceptible.", "description_and_impact": "This vulnerability allows an unauthenticated attacker to read the entire contents of a Dgraph database when the default configuration (no ACL) is in use. By sending two unauthenticated HTTP POST requests to port 8080\u2014first to /alter to add a specially crafted schema predicate and second to /mutate?commitNow=true with a JSON key that contains the predicate name followed by an @ symbol and a malicious DQL payload\u2014the attacker can inject arbitrary DQL commands. The injected query is executed on the server and its result set is returned in the HTTP response, effectively granting full data exfiltration. The weakness is a form of JSON injection, identified as CWE\u2011943.", "risk_and_exploitability": "The CVSS score of 9.1 indicates a high severity due to complete data compromise. Although the EPSS score is less than 1\u202f%\u2014suggesting a low current exploitation probability\u2014the vulnerability is publicly known and the attack does not require privileged access, only the ability to reach the unauthenticated API endpoints. The solution is not yet in CISA\u2019s KEV catalog. If a Dgraph instance is publicly reachable and ACL is not enabled, this weakness can be exploited with minimal effort. Enabling authentication or applying the patch dramatically reduces risk."}}}}, "created": "2026-04-27T20:20:42.729836+00:00", "updated": "2026-04-28T06:00:09.605063+00:00", "vendors": ["dgraph", "dgraph$PRODUCT$dgraph"]}