CVE-2026-118665 | ardatan GraphQL Tools up to 1.1.35 Legacy WebSocket Executor index.ts buildWSLegacyExecutor information disclosure

October 28, 2026 Yanac

A vulnerability, which was classified as problematic, was found in ardatan GraphQL Tools up to 1.1.35. Affected by this issue is the function buildWSLegacyExecutor of the file packages/executors/legacy-ws/src/index.ts of the component Legacy WebSocket Executor. The manipulation results in information disclosure.

This vulnerability is known as CVE-2026-118665. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More