PT-2026-30330 · Npm · Directus

Published 2026-04-04 · Updated 2026-04-04 · CVE-2026-35413

OSV

CVSS v3.1

5.3

Medium

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

When GRAPHQL INTROSPECTION=false is configured, Directus correctly blocks standard GraphQL introspection queries ( schema, type). However, the server specs graphql resolver on the /graphql/system endpoint returns an equivalent SDL representation of the schema and was not subject to the same restriction. This allowed the introspection control to be bypassed, exposing schema structure (collection names, field names, types, and relationships) to unauthenticated users at the public permission level, and to authenticated users at their permitted permission level.

Impact

Administrators who set GRAPHQL INTROSPECTION=false to hide schema structure from clients would have had a false sense of security, as equivalent schema information remained accessible via the SDL endpoint without authentication.

Credit

This vulnerability was discovered and reported by bugbunny.ai.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-35413

GHSA-WXWM-3FXV-MRVX

Affected Products

Directus

References · 3

• https://osv.dev/vulnerability/GHSA-wxwm-3fxv-mrvx · Vendor Advisory
• https://github.com/directus/directus · Note
• https://github.com/directus/directus/security/advisories/GHSA-wxwm-3fxv-mrvx · Note