Aller au contenu
en Se connecter
5.0 Moyenne

CVE-2026-34972 OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google…

Description

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. From 1.8.0 to 1.13.1, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement. This vulnerability is fixed in 1.14.0.

Produits et versions touchés

Produit Versions touchées Corrigé en
openfga 1.8 1.8.0 → < 1.14.0 1.14.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de openfga

Les 27 CVE de openfga →
CVE-2026-61709 OpenFGA is an authorization and permission engine built for developers 5.3 Moyenne CVE-2026-55689 OpenFGA is an authorization/permission engine built for developers 6.8 Moyenne CVE-2026-55170 OpenFGA is an authorization/permission engine built for developers 2.1 Faible CVE-2026-48096 OpenFGA is an authorization/permission engine built for developers 5.0 Moyenne
Suivre cette CVE