GraphDB 11.4.1 Release Notes

09/07/2026

Component Versions

RDF4J	Connectors	Workbench
5.3.1	16.7.1	3.4.1

Important

GraphDB 11.4.1 addresses a number of high third-party vulnerabilities and fixes several bugs. Notably, this patch release fixes two critical issues — a bug which caused a fingerprint mismatch in Opensearch, and a bug in the cluster mechanism where data between nodes with many repositories was not replicated.

We recommend everyone to upgrade.

Caution

Solr connector deprecation notice

The Solr connector has been deprecated in GraphDB 11.4 and will be removed in version 12 of GraphDB. If you are using it, please contact us via the available support channels to discuss the alternatives.

Bug fixing

	Description	Severity
GDB-14820	SPARQL queries fail when using `FILTER`, subqueries, and property paths with the property path positioned outside the subquery	Major
GDB-14698	Using `case.pie` as a custom ruleset name breaks the repository	Major
GDB-14547	Query performance regression	Major
GDB-14211	`HTTP 500` returned instead of leaving the variable unbound when the SPARQL query contains an unsafe boolean evaluation of an unbound variable	Medium

Bug fixing

	Description	Severity
GDB-14504	Editing a user not persisted in local user config triggers snapshot replication on nodes that do not contain it	Critical
GDB-14337	If `graphdb.max.active.repositories` is set, cluster creation may fail when there are many repositories to be replicated to a clean node	Major
GDB-13348	Follower node stuck with stale term after snapshot recovery causes data inconsistency	Medium

Bug fixing

	Description	Introduced	Severity
GDB-14528	Remote code execution through ruleset upload		Major

Fixed third-party vulnerabilities

Vulnerability	Severity
CVE-2026-47691	8.7 High
CVE-2026-45674	8.7 High
CVE-2026-45416	7.5 High
CVE-CVE-2026-44249	8.1 High
CVE-2026-42587	7.5 High
CVE-2026-42584	7.3 High
CVE-2026-42583	7.5 High
CVE-2026-50010	7.5 High
CVE-2026-54512	8.1 High
CVE-2026-54513	8.1 High
GHSA-2r2c-cx56-8933	7.5 High
GHSA-47qp-hqvx-6r3f	7.5 High

New features and improvements

GDB-14396 Update the Ontop Dependency to 5.5.0

Bug fixing

	Description	Introduced	Severity
GDB-14635	Fingerprint mismatch due to validation errors in Opensearch	10.8.14	Critical

New features and improvements

GDB-14669 Show repository description when hover a repository name in the GraphDB Workbench Repository view

Bug fixing

	Description	Introduced	Severity
GDB-14713	Hovering over saved SPARQL queries does not display their full title		Medium
GDB-14691	The description field for a repository is barely visible in the Repository view in the GraphDB Workbench		Medium
GDB-14665	Cannot setup Basic and SSO hybrid authentication	11.3	Major
GDB-14609	Geo datatypes are case sensitive when they should be case insensitive	11.4	Medium

In this section: