CVE-2026-102748 | Dgraph-io Dgraph up to 25.3.x Administrative Route Registration dgraph/cmd/zero/run.go Server.RemoveNode id/group privileges management

October 14, 2026 Yanac

A vulnerability was found in Dgraph-io Dgraph up to 25.3.x. It has been rated as critical. Impacted is the function Server.RemoveNode of the file dgraph/cmd/zero/run.go of the component Administrative Route Registration. Performing a manipulation of the argument id/group results in improper privilege management.

This vulnerability is known as CVE-2026-102748. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More