CVE-2023-22951: Tigergraph Cloud

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in TigerGraph Enterprise Free Edition 3.x. It creates an authentication token for internal systems use. This token can be read from the configuration file. Using this token on the REST API provides an attacker with anonymous admin-level privileges on all REST API endpoints.

Affected products

• Tigergraph Cloud: affected versions not specified
• Tigergraph Tigergraph Enterprise: version 3.7.0 only

Published 2023-04-13. Last modified 2026-06-17.