StyleSmuggler unauthenticated GraphQL styles[] exploit query-string request

Arnold Chan@slaz

•updated Sep 6, 2026•0•0•0

This rule detects an unauthenticated exploitation attempt against Magento GraphQL endpoints, specifically targeting the 'styles' parameter. The attack pattern involves sending a malformed request to the /graphql endpoint with an 'X-TRACE-' header, which is indicative of the StyleSmuggler vulnerability exploit.