graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3491 advisory.

    Red Hat Satellite is a system management solution that allows organizations     to configure and maintain their systems without the necessity to provide     public Internet access to their servers or other client systems. It     performs provisioning and configuration management of predefined standard     operating environments.

    Security Fix(es):

    * rubygem-graphql: Remote code execution when loading a crafted GraphQL schema (CVE-2025-27407)

    * rubygem-rack: Local File Inclusion in Rack::Static (CVE-2025-27610)

    * python-jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)

    Users of Red Hat Satellite are advised to upgrade to these updated     packages, which fix these bugs.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3492 advisory.

    Red Hat Satellite is a system management solution that allows organizations     to configure and maintain their systems without the necessity to provide     public Internet access to their servers or other client systems. It     performs provisioning and configuration management of predefined standard     operating environments.

    Security Fix(es):

    * rubygem-graphql: Remote code execution when loading a crafted GraphQL schema (CVE-2025-27407)

    * rubygem-rack: Local File Inclusion in Rack::Static (CVE-2025-27610)

    Users of Red Hat Satellite are advised to upgrade to these updated     packages, which fix these bugs.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3490 advisory.

    Red Hat Satellite is a system management solution that allows organizations     to configure and maintain their systems without the necessity to provide     public Internet access to their servers or other client systems. It     performs provisioning and configuration management of predefined standard     operating environments.

    Security Fix(es):

    * rubygem-rack: Local File Inclusion in Rack::Static (CVE-2025-27610)

    * rubygem-graphql: Remote code execution when loading a crafted GraphQL schema (CVE-2025-27407)

    Users of Red Hat Satellite are advised to upgrade to these updated     packages, which fix these bugs.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a435609c-ffd5-11ef-b4e4-2cf05da270f3 advisory.

    Gitlab reports:
    CVE-2025-25291 and CVE-2025-25292 (third party gem ruby-saml)     CVE-2025-27407 (third party gem graphql)     Denial of Service Due to Inefficient Processing of Untrusted Input     Credentials disclosed when repository mirroring fails     Denial of Service Vulnerability in GitLab Approval Rules due to Unbounded Field     Internal Notes in Merge Requests Are Emailed to Non-Members Upon Review Submission     Maintainer can inject shell code in Google integrations     Guest with custom Admin group member permissions can approve the users invitation despite user caps

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
233927	RHEL 8 : Satellite 6.15.5.2 Async Update (Important) (RHSA-2025:3491)	Nessus	Red Hat Local Security Checks	medium
233923	RHEL 8 : Satellite 6.14.4.5 Async Update (Important) (RHSA-2025:3492)	Nessus	Red Hat Local Security Checks	critical
233911	RHEL 8 / 9 : Satellite 6.16.4 Async Update (Important) (RHSA-2025:3490)	Nessus	Red Hat Local Security Checks	critical
232721	FreeBSD : Gitlab -- Vulnerabilities (a435609c-ffd5-11ef-b4e4-2cf05da270f3)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2025-27407

critical

Tenable Plugins

medium

critical

critical

critical