Vulnerabilities in openfga
27 resultsCVE-2026-55170LOWOpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisionsEPSS 0.3%CVE-2025-64751MEDIUMOpenFGA Improper Policy EnforcementEPSS 0.3%CVE-2026-40293MEDIUMOpenFGA Playground Preshared Key ExposureEPSS 0.3%CVE-2026-33729MEDIUMOpenFGA has an Authorization Bypass through cached keysEPSS 0.3%CVE-2026-34972MEDIUMOpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collisionEPSS 0.2%CVE-2026-41131MEDIUMOpenFGA has Improper Policy EnforcementEPSS 0.1%CVE-2026-48096MEDIUMOpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoningEPSS 0.1%