> CVE-2025-46331

« BACK_TO_HOME
PUBLISHED
2025-04-30 19:15
MODIFIED
2025-05-02 13:53
EPSS (Prob. Exploit)
0.39%
Top 68.2%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-11

> DESCRIPTION

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.10 to v1.3.6 (Helm chart <= openfga-0.2.28, docker <= v.1.8.10) are vulnerable to authorization bypass when certain Check and ListObject calls are executed. This issue has been patched in version 1.8.11.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-w222-m46c-mgh6 MODERATE

OpenFGA Authorization Bypass

AFFECTED PACKAGES:
GO / github.com/openfga/openfga
>= 1.3.6, < 1.8.11
Fixed in: 1.8.11

> HISTORIQUE DES MODIFICATIONS

Première apparition
30/04/2025 19:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:03
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME