Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization

Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from the authorization middleware config (admin.go), making it completely unauthenticated. Unlike the similar restore mutation which requires Guardian-of-Galaxy authentication, restoreTenant executes with zero middleware. This mutation accepts attacker-controlled backup source URLs (including file:// for local filesystem access), S3/MinIO credentials, encryption key file paths, and Vault credential file paths. An unauthenticated attacker can overwrite the entire database, read server-side files, and perform SSRF. This vulnerability is fixed in 25.3.1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

授权机制缺失

Dgraph 安全漏洞

Dgraph是Dgraph开源的一个具有图形后端的水平可扩展分布式 GraphQL 数据库。 Dgraph 25.3.1之前版本存在安全漏洞，该漏洞源于restoreTenant管理突变缺少授权中间件，可能导致未经身份验证的攻击者覆盖数据库、读取服务器端文件和执行SSRF。

N/A

N/A