CVE-2026-81633 Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment
An unauthenticated attacker can crash GraphQL queries and potentially expose stack traces by sending a malformed relay node ID with an unknown type segment.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-81633?
CVE-2026-81633 is a medium-severity denial of service vulnerability in ash-project ash_graphql, published on 30 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay node(id: ...) query with an unhandled KeyError.
AshGraphql.Graphql.Resolver.resolve_node/2 decodes the client-supplied global ID with decode_relay_id/1, which only base64-decodes the string and splits it on : without validating the type segment. The decoded type is passed straight to Map.fetch!(type_to_domain_and_resource_map, type). Because fetch! raises on a missing key, a relay ID whose type segment is a valid atom that is not a relay-exposed type aborts the resolver before its resolve/2 clauses and their rescue handlers run, so the error never becomes a GraphQL error and may expose a stacktrace. Common resource names are easy to guess. The fix uses Map.fetch/2 and returns an Invalid node id error for unknown types.
This issue affects ash_graphql: from 0.27.0 before 1.11.0.
Weakness: CWE-20
Which versions are affected by CVE-2026-81633?
1 open source package ship an affected version, including ash_graphql.
| Package | Affected | Fixed in |
|---|---|---|
ash_graphql Hex | From 0.27.0 | 1.11.0 |
How do I fix CVE-2026-81633?
Upgrade ash_graphql to 1.11.0 or later.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-81633 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-81633 exists.
Sources
Also known as EEF-CVE-2026-81633, GHSA-mrgv-g7gf-r96h.