Excessive Resource Consumption in Probo Governance, Risk, and Compliance Platform

CVE-2026-64861

What is CVE-2026-64861?

The Probo governance, risk, and compliance platform suffers from a vulnerability in its GraphQL endpoint for versions prior to 0.222.0. This flaw allows an attacker to exploit the system by sending a single request with numerous aliased resolver calls, leading to an overwhelming consumption of server-side resources. Such actions can degrade the performance and availability of the service. The issue has been addressed in version 0.222.0, where the necessary restrictions on alias count, query depth, and query complexity have been implemented to mitigate these risks.

References