Anchore Enterprise versions prior to 5.25.1 contain a flaw in the GraphQL Reports API that allows an attacker with valid authentication to inject and execute arbitrary SQL statements against the system database. This injection can modify, delete, or exfiltrate data stored within Anchore, thereby compromising data integrity and confidentiality.

The vulnerability applies to Anchore Enterprise deployments using any version earlier than 5.25.1. The affected component is the GraphQL Reports API service that processes authenticated user requests.

The flaw has a CVSS score of 8.5, indicating high impact, while the EPSS score is less than 1%, suggesting a low probability of current exploitation. It is not listed in the CISA KEV catalog. Exploitation requires authenticated access to the GraphQL API, making it a threat primarily to privileged users or compromised accounts within the network.