
Dgraph patches unauthenticated restoreTenant admin mutation takeover
CVE-2026-34976 is a critical missing-authorization flaw in `dgraph` where an unauthenticated `restoreTenant` admin mutation enables database overwrite, server file reads, and SSRF.
NewsDatabase SecurityGraphQL
2 minYesterday
