CVE-2026-107372

The auth0-ai-js FGA retriever does not distinguish between authorization checks under different conditions when filtering documents during retrieval-augmented generation, resulting in documents denied by Auth0 FGA being included in the model context and used in the generated response.

• CWE-863

• https://trust.okta.com/security-advisories/improper-access-control-in-auth0-ai-js-document-retrieval-cve-2026-107372

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Awaiting Analysis

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-107365A user with query access to a Google Cloud Monitoring data s…5.3
• CVE-2026-107366IBM Langflow OSS 1.0.0 through 1.12.4 contains three message…8.3
• CVE-2026-107369The auth0/nextjs-auth0 SDK validates that the returnTo param…6.1
• CVE-2026-10737The SP Project & Document Manager plugin for WordPress is vu…7.5
• CVE-2026-107370When a username for an Active Directory connection is a doma…5.3
• CVE-2026-107371When the authorize() method is called with a maxAge paramete…5.4
• CVE-2026-107373ExtUtils::Typemaps::STL::String versions before 1.06 for Per…9.1
• CVE-2026-107375JHipster is a development platform to quickly generate, deve…8.8
• CVE-2026-107376webonyx graphql-php is a PHP implementation of the GraphQL s…8.2
• CVE-2026-107377datamodel-code-generator generates Python data models from s…7.5
• CVE-2026-107378CairoSVG is an SVG converter based on Cairo, a 2D graphics l…8.7
• CVE-2026-107379savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, s…6.5