Security Advisory

CVE-2026-55170

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-09 21:04:28

Last updated 2026-07-10 14:26:15

Assigner GitHub_M

CVSS score 2.1

State PUBLISHED

Description

OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorization_model identifier columns can compare case-distinct values such as user:Alice and user:alice as equivalent, causing two distinct check requests to return the same response. This issue is fixed in 1.18.0.

← Browse all CVEs View on cve.org ↗