Craft CMS versions 4.0.0 through 4.18.8 and 5.0.0 through 5.11.1 allow unauthenticated attackers to inject arbitrary SQL via the GraphQL eager‑load feature. The vulnerability stems from arguments on eager‑loadable nodes that are absent from the public schema being copied into the EagerLoadPlan criteria without proper sanitization. As a result, an attacker can construct a parenthesized select argument to execute a crafted SQL expression and read any database table, including sensitive fields such as password hashes and session tokens, thereby compromising confidentiality.

The affected product is Craft CMS, offered by craftcms. Vulnerable versions include 4.x releases prior to 4.18.9 and 5.x releases prior to 5.11.2. The specific CPE string cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:* identifies the entire product line impacted.

The CVSS score of 8.8 classifies this as a high‑severity vulnerability. The EPSS score is not available, and it is not listed in CISA’s KEV catalog, suggesting that public exploitation evidence is limited. However, the attack vector is unauthenticated and web‑based, meaning any visitor to the site could potentially exploit the flaw without possessing credentials. Once exploited, an attacker can read arbitrary database content, which could lead to account compromise, data exfiltration, and further lateral movement within the organization.