CVE-2026-1174 MEDIUM

CVE-2026-1174: birkir prime GraphQL Alias graphql resource consumption

Vendor Birkir
Product prime
Weakness CWE-400
Published January 19, 2026
Last update February 23, 2026

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql of the component GraphQL Alias Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Key dates

02Disclosure timeline

January 19, 2026 CVE published
February 23, 2026 Record updated