Skip to content
Threat Feed
Subscribe

Product

Graphiti

1 brief RSS
critical advisory

Graphiti JSONAPI Arbitrary Method Execution Vulnerability (CVE-2026-33286)

Graphiti versions prior to 1.10.2 are vulnerable to arbitrary method execution via maliciously crafted JSONAPI payloads, allowing attackers to invoke public methods on model instances, classes, or associations.

Graphiti jsonapi method-execution vulnerability
2r 1t