Dgraph CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Dgraph CVE published 2026-04-06

CVE-2026-34976

CVE-2026-34976 is a critical vulnerability in Dgraph, an open-source distributed GraphQL database. The vulnerability exists in the restoreTenant admin mutation, which is unauthenticated and allows an attacker to overwrite the entire database, read server-side files, and perform SSRF. This vulnerability is fixed in version 25.3.1. The restoreTenant mutation accepts attacker-controlled backup source URLs, S [truncated]