GO-2025-3470

Affected Products

Timeline

• Mar 3, 2025 CVE Published
• Feb 4, 2026 CVE Updated
• May 1, 2026 Security Advisory

References

• https://github.com/openfga/openfga/security/advisories/GHSA-g4v5-6f5p-m38j advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25196 advisory
• https://github.com/openfga/openfga/commit/0aee4f47e0c642de78831ceb27bb62b116f49588 patch