Is CVE-2026-10130 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-10130 being exploited in the wild.

How severe is CVE-2026-10130?

High severity, with a CVSS score of 8.2, published 18 July 2026.

Is there a fix for CVE-2026-10130?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-10130 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-10130?

Check whether you run FalkorDB QueryWeaver at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10130: FalkorDB QueryWeaver authentication bypass via email signup

CVE-2026-10130 · Severity: high · CVSS 8.2 · Published 2026-07-18

QueryWeaver, an open-source tool that translates natural language into database queries, contains a flaw that allows unauthorized individuals to take over existing user accounts. By simply attempting to sign up with a known user's email address, an attacker can trick the system into providing a valid login session for that user. This allows the attacker to access sensitive data and perform actions as the victim without needing their password.

Vendors: FalkorDB.

Quick answers

Is CVE-2026-10130 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-10130 being exploited in the wild.
How severe is CVE-2026-10130?: High severity, with a CVSS score of 8.2, published 18 July 2026.
Which products and versions are affected?: FalkorDB QueryWeaver <= 0.2.0.
Is there a fix for CVE-2026-10130?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-10130 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-10130?: Check whether you run FalkorDB QueryWeaver at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An authentication bypass vulnerability exists in QueryWeaver's signup route due to incorrect authorization logic. The application uses a Cypher MERGE operation to unconditionally create and link a new session token to an Identity matching the provided email address before verifying if the account already exists. Consequently, an unauthenticated remote attacker can provide a victim's email address during the signup process to receive a valid authenticated session token. This allows for full account takeover without prior credentials or user interaction. The issue is fixed in version 0.3.1.

Affected products

FalkorDB QueryWeaver <= 0.2.0

Timeline

2026-07-18: disclosed
2026-07-18: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.