Skip to content
OpenAdvisories

Product · FalkorDB

QueryWeaver

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-10130

    QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts

    QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for existing accounts by submitting a signup request with a known victim email address. The signup route unconditionally creates a…

    FalkorDB QueryWeaver