CVE-2026-63637 | dgraph-io Dgraph up to 25.3.7 Query Rewriter query_rewriter.go maybeQuoteArg sql injection

A vulnerability labeled as critical has been found in dgraph-io Dgraph up to 25.3.7. This affects the function maybeQuoteArg of the file graphql/resolve/query_rewriter.go of the component Query Rewriter. Executing a manipulation can lead to sql injection.

This vulnerability is tracked as CVE-2026-63637. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More