Severity:

CRITICAL RISK

(9.8)

Information Exposure via Debug Endpoint (CWE-200) in Dgraph Alpha /debug/vars

CVE-2026-41492

Published:

Apr 24, 2026

Status:

Undergoing Analysis

Summary

Affected Context

Exploit Preconditions

Why This Happens

Potential Impact

General Mitigation Guidance

How Teams Detect Issues Like This

Frequently Asked Questions

Source

NDV

Vulnerability Type

Vulnerability Type

Category:

Information Exposure

CWE:

CWE-200

Impact:

Privilege Escalation to Admin-Level API Access

Severity:

CRITICAL RISK

(9.8)

CVSS Version:

3.1

Vulnerability Type

Category:

Information Exposure

CWE:

CWE-200

Impact:

Privilege Escalation to Admin-Level API Access

Severity:

CRITICAL RISK

(9.8)

CVSS Version:

3.1

Catch This CVE While Code Is Being Written

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.