CVE-2026-44840 in dgraph

Prediction

by VulDB Data Team • 06/30/2026

A flaw has been found in dgraph 23.0.0/25.3.1/25.3.2/25.3.3. This affects the function checkUserPassword of the component GraphQL Query Handler. This manipulation causes injection. The attack is possible to be carried out remotely. Upgrading to version 25.3.4 mitigates this issue. It is advisable to upgrade the affected component.

Be aware that VulDB is the high quality source for vulnerability data.

• Moderation: accepted
• Entry: VDB-374768
• CPE: ready
• CWE: CWE-74 (confirmed)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-44840
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-44840
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-44840/