A vulnerability was found in ory hydra up to 26.1.x. It has been classified as critical. The impacted element is an unknown function of the component Admin API. This manipulation causes sql injection.
This vulnerability is handled as CVE-2026-33504. The attack can be initiated remotely. There is not any exploit available.
Upgrading the affected component is recommended.
