CVE-2026-109302 | Parse Server up to 8.6.93/9.10.1-alpha.13 GraphQL Introspection information disclosure

October 12, 2026 Yanac

A vulnerability marked as problematic has been reported in Parse Server up to 8.6.93/9.10.1-alpha.13. This impacts an unknown function of the component GraphQL Introspection. This manipulation causes information disclosure.

This vulnerability is registered as CVE-2026-109302. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More