CVE-2026-34972
Last modified
CVE-2026-34972 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. From 1.8.0 to 1.13.1, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. From 1.8.0 to 1.13.1, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement. This vulnerability is fixed in 1.14.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Openfga | Helm Charts | >= 0.2.16, < 0.2.62 |
| Openfga | Openfga | >= 1.8.0, < 1.14.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-34972?
How severe is CVE-2026-34972?
How do I fix CVE-2026-34972?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-34965Cockpit CMS contains an authenticated remote code execution …8.8
- CVE-2026-34966Gitea prior to 1.27.0 contains a server-side request forgery…8.3
- CVE-2026-34969Nhost is an open source Firebase alternative with GraphQL. P…7.5
- CVE-2026-3497Vulnerability in the OpenSSH GSSAPI delta included in variou…7.5
- CVE-2026-34970Mantis Bug Tracker (MantisBT) is an open source issue tracke…5.3
- CVE-2026-34971Wasmtime is a runtime for WebAssembly. From 32.0.0 to before…9
- CVE-2026-34973phpMyFAQ is an open source FAQ web application. Prior to ver…5.3
- CVE-2026-34974phpMyFAQ is an open source FAQ web application. Prior to ver…5.4
- CVE-2026-34975Plunk is an open-source email platform built on top of AWS S…4.3
- CVE-2026-34976Dgraph is an open source distributed GraphQL database. Prior…10
- CVE-2026-34977Aperi'Solve is an open-source steganalysis web platform. In …9.8
- CVE-2026-34978OpenPrinting CUPS is an open source printing system for Linu…6.5
Are you affected by CVE-2026-34972?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST