Dgraph Alpha Vulnerability: Unauthenticated Snapshot Import Risk
- Severity
- HIGH
- Affected component
- dgraph (go)
- Patched version
- Not yet available
Dgraph Alpha v25 is reportedly affected by a vulnerability that allows unauthenticated clients to replace existing database data via external snapshot import.
What happened
Dgraph Alpha v25 exposes the RPCs used for external snapshot import on the public gRPC port without authentication or authorization. This vulnerability, tracked as GHSA-RRWH-6JRQ-WP5V, allows an unauthenticated client to replace the existing database data. The issue was first flagged on August 20, 2026. The vulnerability has not been exploited in the wild as of the latest reports.
To assess your exposure, check if you are using Dgraph Alpha v25. If so, review your gRPC port security configurations to ensure they include authentication and authorization measures.
What to do about it
- Upgrade to a version of Dgraph that includes a fix for this vulnerability.
- Ensure that the public gRPC port is secured with authentication and authorization.
- Monitor the primary sources for updates on patched versions and further recommendations.
- Conduct a security review of your Dgraph Alpha configurations to ensure they align with best practices for authentication and authorization.
How 0Day would have caught this
dgraph is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
You are affected if you are using Dgraph Alpha v25.
What should I do right now?
Upgrade to a version of Dgraph that includes a fix for this vulnerability and ensure that the public gRPC port is secured with authentication and authorization.
Has an official fix been published?
No official fix has been published yet. Monitor the sources for updates.
What is the severity of this vulnerability?
The severity of this vulnerability is high.