CVE-2026-108096 | AWS graphql-index-transformer up to 3.1.1 Query Resolvers improper authorization

October 9, 2026 Yanac

A vulnerability described as problematic has been identified in AWS graphql-index-transformer up to 3.1.1. The impacted element is an unknown function of the component Query Resolvers. Such manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-108096. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More