Allowed to view the Location, handed the Device: a GraphQL permission gap in Nautobot (GHSA-mfwj-pjgx-22v2)

dev.to· rss · 0 points · Nov 7, 2026

Allowed to view the Location, handed the Device: a GraphQL permission gap in Nautobot (GHSA-mfwj-pjgx-22v2)

TL;DR What: Nautobot's GraphQL API enforced object permissions at the root of a query...

0 comments

Sign in to join the discussion — your thebay.events account works here.

No comments yet.