Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/16 9:8 p.m.14 views

Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpoints

Summary An unauthenticated debug endpoint in Dgraph Alpha exposes the full process command line, including the configured admin token from --security "token=...". This does not break token validation logic directly; instead, it discloses the credential and enables unauthorized admin-level access ...

9.4CVSS5.9AI score0.00509EPSS
SaveExploits1References4Affected Software3
Rows per page
Query Builder