Unrated severityOSV Advisory· Published Jan 21, 2026· Updated Jan 22, 2026
Hasura GraphQL 1.3.3 - Remote Code Execution
CVE-2021-47748
Description
Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL query manipulation. Attackers can inject commands into the run_sql endpoint by crafting malicious GraphQL queries that execute system commands through PostgreSQL's COPY FROM PROGRAM functionality.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: v1.0.0-alpha0, v1.0.0-alpha01, v1.0.0-alpha02, …
Patches
Vulnerability mechanics
References
2- www.exploit-db.com/exploits/49802mitreexploit
- www.vulncheck.com/advisories/hasura-graphql-remote-code-executionmitrethird-party-advisory
News mentions
0No linked articles in our index yet.