Beveiligingsadvies

CVE-2026-55170

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-09 21:04:28

Laatst bijgewerkt 2026-07-10 14:26:15

Toegewezen door GitHub_M

CVSS-score 2.1

Status PUBLISHED

Beschrijving

OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorization_model identifier columns can compare case-distinct values such as user:Alice and user:alice as equivalent, causing two distinct check requests to return the same response. This issue is fixed in 1.18.0.

← Alle CVE's bekijken Bekijk op cve.org ↗