CVE-2025-27097

CVE-2025-27097 is a high-severity vulnerability affecting GraphQL Mesh, a GraphQL Federation framework. It involves a memory leak where GraphQL Mesh incorrectly caches initial query variables, including authentication tokens, and reuses them for subsequent requests with different variables until the cache is evicted. This could lead to unauthorized access or privilege escalation if a token is inadvertently reused. The vulnerability has a CVSS score of 7.5 (HIGH) due to its network-based attack vector, low attack complexity, and high impact on availability, though it does not directly compromise confidentiality or integrity. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.