ByteOS Network

NVD Vulnerability Details :

CVE-2025-55213

Awaiting Analysis

Source-security-advisories@github.com

Published At-18 Aug, 2025 | 20:15

Updated At-18 Aug, 2025 | 20:16

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.9.3 to v1.9.4 ( openfga-0.2.40 <= Helm chart <= openfga-0.2.41, v1.9.3 <= docker <= v.1.9.4) are vulnerable to improper policy enforcement when certain Check and ListObject calls are executed. This vulnerability is fixed in 1.9.5.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	5.8	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE ID	Type	Source
CWE-863	Primary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/openfga/openfga/commit/1a7e0e37fc4777c824b2386cac4867a66f3480b0	security-advisories@github.com	N/A
https://github.com/openfga/openfga/security/advisories/GHSA-mgh9-4mwp-fg55	security-advisories@github.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History