What’s Vulnerable › Products

openfga Helm Charts vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your openfga Helm Charts version is affected

Latest openfga Helm Charts vulnerabilities

• CVE-2026-55689 — OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset (CVSS 8.1)
• CVE-2026-55170 — OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions (CVSS 5.4)
• CVE-2026-48096 — OpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoning (CVSS 5.3)
• CVE-2026-41131 — OpenFGA has Improper Policy Enforcement (CVSS 5.0)
• CVE-2026-34972 — OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision (CVSS 8.8)
• CVE-2026-24851 — OpenFGA Improper Policy Enforcement (CVSS 8.8)
• CVE-2025-64751 — OpenFGA Improper Policy Enforcement (CVSS 8.8)
• CVE-2025-55213 — OpenFGA Authorization Bypass (Check) (CVSS 9.8)
• CVE-2025-48371 — OpenFGA Authorization Bypass (CVSS 8.8)
• CVE-2025-46331 — OpenFGA Authorization Bypass (CVSS 9.8)
• CVE-2025-25196 — OpenFGA Authorization Bypass (CVSS 9.8)
• CVE-2024-56323 — OpenFGA Authorization Bypass (CVSS 9.8)