GO-2025-3384 — Vulnetix

GO-2025-3384 PUBLISHED

OpenFGA Authorization Bypass in github.com/openfga/openfga

Affected Products

Vendor	Product	Versions
github.com	openfga/openfga	1.3.8, 1.3.8

Timeline

Jan 14, 2025 CVE Published
Feb 4, 2026 CVE Updated

References

https://github.com/openfga/openfga/security/advisories/GHSA-32q6-rr98-cjqv advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›