CVE-2026-34976

Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from the authorization middleware config (admin.go), making it completely unauthenticated. Unlike the similar restore mutation which requires Guardian-of-Galaxy authentication, restoreTenant executes with zero middleware. This mutation accepts attacker-controlled backup source URLs (including file:// for local filesystem access), S3/MinIO credentials, encryption key file paths, and Vault credential file paths. An unauthenticated attacker can overwrite the entire database, read server-side files, and perform SSRF. This vulnerability is fixed in 25.3.1.

• CWE-862

• https://github.com/dgraph-io/dgraph/security/advisories/GHSA-p5rh-vmhp-gvcwExploit, Vendor Advisory
• https://github.com/dgraph-io/dgraph/security/advisories/GHSA-p5rh-vmhp-gvcwExploit, Vendor Advisory

Published

Apr 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34970Mantis Bug Tracker (MantisBT) is an open source issue tracke…5.3
• CVE-2026-34971Wasmtime is a runtime for WebAssembly. From 32.0.0 to before…9
• CVE-2026-34972OpenFGA is a high-performance and flexible authorization/per…8.8
• CVE-2026-34973phpMyFAQ is an open source FAQ web application. Prior to ver…5.3
• CVE-2026-34974phpMyFAQ is an open source FAQ web application. Prior to ver…5.4
• CVE-2026-34975Plunk is an open-source email platform built on top of AWS S…4.3
• CVE-2026-34977Aperi'Solve is an open-source steganalysis web platform. In …9.8
• CVE-2026-34978OpenPrinting CUPS is an open source printing system for Linu…6.5
• CVE-2026-34979OpenPrinting CUPS is an open source printing system for Linu…5.3
• CVE-2026-3498The BlockArt Blocks plugin for WordPress is vulnerable to St…6.4
• CVE-2026-34980OpenPrinting CUPS is an open source printing system for Linu…7.5
• CVE-2026-34981The whisperX API is a tool for enhancing and analyzing audio…5.8