Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-48096
Analyzed
More InfoOfficial Page
Source-security-advisories@github.com
View Known Exploited Vulnerability (KEV) details
Published At-10 Jun, 2026 | 16:17
Updated At-12 Jun, 2026 | 00:46

OpenFGA is an authorization/permission engine built for developers. Prior to version 1.16.0, when iterator caching is enabled, two distinct check requests can produce the same cache key, leading to OpenFGA reusing an earlier cached result for a subsequent request. This issue has been patched in version 1.16.0.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.15.0MEDIUM
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
Primary3.15.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Type: Secondary
Version: 3.1
Base score: 5.0
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
Type: Primary
Version: 3.1
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CPE Matches
openfga
openfga
>>helm_charts>>Versions before 0.3.5(exclusive)
cpe:2.3:a:openfga:helm_charts:*:*:*:*:*:openfga:*:*
openfga
openfga
>>openfga>>Versions before 1.16.0(exclusive)
cpe:2.3:a:openfga:openfga:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-345Primarysecurity-advisories@github.com
CWE-668Primarysecurity-advisories@github.com
CWE ID: CWE-345
Type: Primary
Source: security-advisories@github.com
CWE ID: CWE-668
Type: Primary
Source: security-advisories@github.com
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://github.com/openfga/openfga/releases/tag/v1.16.0security-advisories@github.com
Product
Release Notes
https://github.com/openfga/openfga/security/advisories/GHSA-8396-jffm-qx4wsecurity-advisories@github.com
Vendor Advisory
Hyperlink: https://github.com/openfga/openfga/releases/tag/v1.16.0
Source: security-advisories@github.com
Resource:
Product
Release Notes
Hyperlink: https://github.com/openfga/openfga/security/advisories/GHSA-8396-jffm-qx4w
Source: security-advisories@github.com
Resource:
Vendor Advisory
Change History
0Changes found
Details not found