Unrated severityOSV Advisory· Published Dec 22, 2025· Updated Apr 7, 2026
Hasura GraphQL 1.3.3 Local File Read via SQL Injection
CVE-2021-47714
Description
Hasura GraphQL 1.3.3 contains a local file read vulnerability that allows attackers to access system files through SQL injection in the query endpoint. Attackers can exploit the pg_read_file() PostgreSQL function by crafting malicious SQL queries to read arbitrary files on the server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: v1.0.0-alpha0, v1.0.0-alpha01, v1.0.0-alpha02, …
Patches
Vulnerability mechanics
References
2- www.exploit-db.com/exploits/49790mitreexploit
- www.vulncheck.com/advisories/hasura-graphql-local-file-read-via-sql-injectionmitrethird-party-advisory
News mentions
0No linked articles in our index yet.