Threats tagged 'ghsa-qj98-gp63-54xj'

Dgraph version prior to 25.4.0 has an unauthenticated administrative HTTP interface exposed on port 6080. This interface allows unauthenticated attackers to read cluster state, allocate IDs, and perform destructive membership operations such as removing nodes. Exploitation can disrupt the Zero control plane and destabilize Alpha nodes, resulting in denial of service. The vulnerability arises because administrative endpoints lack authentication or IP whitelisting by default.