Read the docs
TI-2026-79314 Aliases CVE-2026-75508GHSA-r77w-qph3-7vf8

Comment tokens bypass max_tokens limit in graphql-core parser

Priority HIGH 72CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-400.

Summary

Graphql-core, a Python port of GraphQL.js, is affected from 3.2.3 before 3.2.12 and from 3.3.0a3 before 3.3.0rc1. The parser's max_tokens limit does not count comment tokens, but each skipped comment is still allocated and kept in memory (CWE-400). An unauthenticated remote attacker can send a highly compressible, comment-padded document that passes the low token limit and exhausts worker memory before depth or complexity checks run.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1, the parser's max_tokens limit in Parser.advance_lexer counts only non-comment tokens returned after Lexer.lookahead skips comments. Each skipped comment is still allocated as a Token and retained through token.next and token.prev, allowing a highly compressible comment-padded GraphQL document to pass a low token limit while consuming memory. An unauthenticated remote attacker can exhaust worker memory before AST-based depth or complexity controls run. This issue is fixed in versions 3.2.12 and 3.3.0rc1.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00573 47th percentileScored 2026-11-07
Fix Partial graphql-core (graphql-python): 3.2.12, 3.3.0rc1graphql-core (PyPI): 3.2.12, 3.3.0rc1Red Hat: 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
graphql-pythongraphql-core3.2.3 to before 3.2.12; 3.3.0a3 to before 3.3.0rc13.2.12, 3.3.0rc1Patch availableCNA
—graphql-core (PyPI)3.2.3 to before 3.2.123.2.12Patch availableGHSA-r77w-qph3-7vf8
—graphql-core (PyPI)3.3.0a3 to before 3.3.0rc13.3.0rc1Patch availableGHSA-r77w-qph3-7vf8
  • graphql-core Vendorgraphql-python Affected 3.2.3 to before 3.2.12; 3.3.0a3 to before 3.3.0rc1 Fixed in 3.2.12, 3.3.0rc1 Patch available CNA
  • graphql-core (PyPI) Vendor— Affected 3.2.3 to before 3.2.12 Fixed in 3.2.12 Patch available GHSA-r77w-qph3-7vf8
  • graphql-core (PyPI) Vendor— Affected 3.3.0a3 to before 3.3.0rc1 Fixed in 3.3.0rc1 Patch available GHSA-r77w-qph3-7vf8

Remediation

Upgrade graphql-core to 3.2.12 or 3.3.0rc1, depending on the release line in use. The sources list no fixed version for Exploit Intelligence or Red Hat OpenShift AI (RHOAI).

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

  • Fix · CNA graphql-core (graphql-python) Fixed in 3.2.12, 3.3.0rc1
  • Fix · GHSA-r77w-qph3-7vf8 graphql-core (PyPI) Fixed in 3.2.12 Advisory →
  • Fix · GHSA-r77w-qph3-7vf8 graphql-core (PyPI) Fixed in 3.3.0rc1 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Exploit IntelligenceAffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet

Timeline

  1. 2026-10-22 Threatist record created from CVE-2026-75508
  2. 2026-10-22 Alias added: GHSA-r77w-qph3-7vf8
  3. 2026-10-22 Fix available: PyPI/[email protected], PyPI/[email protected] · GHSA-r77w-qph3-7vf8
  4. 2026-10-22 CVSS score added · GHSA-r77w-qph3-7vf8
  5. 2026-10-22 Weakness changed · GHSA-r77w-qph3-7vf8
  6. 2026-10-22 6 new references · GHSA-r77w-qph3-7vf8
  7. 2026-10-23 Affected versions changed · Red Hat
  8. 2026-10-23 CVSS score added · Red Hat
  9. 2026-10-23 Priority changed: MEDIUM → LOW
  10. 2026-10-29 CISA SSVC decision points changed
  11. 2026-10-29 Priority changed: LOW → HIGH

References

Other 6

  • TI-2026-79313 Denial of service in GraphQL-core OverlappingFieldsCanBeMerged rule CVSS 3.1HIGH 7.5
  • TI-2026-82783 GraphQL-core: Denial of service via memory leak in aborted validations CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences