Skip to main content
Apexward Pulse

GitLab

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby

CVE-2025-27407

What this means

This is rated critical severity (9 out of 10). There is no confirmed exploitation of it yet. Ask IT whether the affected products are in your estate.

Full vendor description

graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.

Scoring and exploitation

9.0/ 10
CVSS 3.1 base scoreCritical

Exploitable over the network without any account, under specific conditions, and no one has to click or open anything. High impact on confidentiality, integrity and availability, and it can reach beyond the vulnerable system.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability

Longer bar: easier to attack

Attack vectorNetworkAV:N
Attack complexityHighAC:H
Privileges requiredNonePR:N
User interactionNoneUI:N
ScopeChangedS:C

Impact

Longer bar: more harm

ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
~3.1% estimated chance of attack in 30 daysModel estimate (): a probability signal, not confirmed exploitation
Exploited in the wild
Not confirmed in the
Not reported

Weaknesses

CWE-94

References

11 links from the CVE record, grouped by site.

Related feed events