An unvalidated regexp filter argument in the GraphQL query rewriter passes raw regular expression strings directly into generated DQL. This flaw permits attackers to inject additional DQL operators, potentially causing unintended data disclosure or expanding the scope of data modifications or deletions performed by a GraphQL query or mutation. The injection mechanism enables a client to retrieve or alter data that should not be accessible through normal filters, thereby compromising confidentiality and integrity.

The vulnerability affects the open source distributed GraphQL database dgraph-io dgraph in all releases before version 25.3.8. The issue is fixed in 25.3.8 and subsequent releases.

The CVSS score of 8.6 classifies the fault as high severity, and the absence of an EPSS rating indicates no publicly known exploit trend at the time of analysis. The vulnerability is not listed in the CISA KEV catalog. By exploiting the exposed GraphQL endpoint, an attacker could craft a malicious query or mutation that includes a crafted regular expression filter, thereby injecting arbitrary DQL operators. The attack vector is inferred to be through any publicly or privately accessible GraphQL endpoint that accepts unvalidated filter arguments.