Dgraph: unauthenticated restoreTenant mutation overwrites the database and reads server-side files

Impact

The restoreTenant admin mutation was omitted from Dgraph's authorization middleware, so it runs with no authentication at all, unlike the sibling restore mutation that requires Guardian-of-Galaxy. It accepts attacker-supplied backup source URLs including file://, plus S3/MinIO credentials and encryption-key and Vault credential file paths. An unauthenticated caller who can reach the admin endpoint can overwrite the whole database, read files off the server, and use it as an SSRF pivot into the cluster's object store and metadata services. Where Dgraph backs a metadata or feature store on a GPU fleet, that is both a data-integrity loss and a credential-disclosure path.

Who can reach it

Anyone who can reach the Dgraph Alpha admin GraphQL endpoint over the network. No credentials required.

What to do

Upgrade Dgraph to 25.3.1 and restart the Alpha processes - a daemon restart, no node reboot. Until the upgrade lands, block the /admin endpoint at the network layer so it is reachable only from trusted operator hosts. Rotate any S3/MinIO, encryption-key and Vault material that a reachable instance could have been coerced into reading.

References

Related entries

• Kestra: suffix-match auth bypass on /configs gives unauthenticated workflow execution as rootCVE-2026-49869 · Kestra AuthenticationFilter (suffix match on the /configs path whitelist)Critical
• Kestra: any path ending in /configs skips Basic-Auth, giving unauthenticated flow execution as rootCVE-2026-53576 · Kestra (REST API authentication filter, /configs path suffix)Critical
• NVIDIA AIStore: legacy ETL API lets a remote caller set host namespaces and container security contextCVE-2026-65162 · NVIDIA AIStore (legacy ETL Kubernetes PodSpec initialization API)Critical
• Linux crypto driver for Marvell OCTEON TX: The scatter-gather cleanup path in the Marvell OCTEON TX crypto driver usesCVE-2026-74280 · Linux crypto driver for Marvell OCTEON TXCritical
• Linux VXLAN driver (neighbour hardware address read in route_shortcircuit): `route_shortcircuit()` reads a neighbour'sCVE-2026-74475 · Linux VXLAN driver (neighbour hardware address read in route_shortcircuit)Critical
• Cisco ISE: unauthenticated API endpoint allows full authentication bypass on the applianceCVE-2026-76460 · Cisco Identity Services Engine (unauthenticated API endpoint)Critical