CVE-2026-55773

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9.0, under certain circumstances, improper input handling could allow Cedar-expression injection via unescaped toCedarExpr(). The toCedarExpr() method on Cedar Value types does not escape special characters (" or \) when converting values to Cedar source code. If an integrator uses toCedarExpr() to build policy text at runtime from user-controlled values, an actor could inject arbitrary Cedar expressions. For example, injecting || true into a permit ... when { ... } clause could make the permit unconditional, or injecting && false into a forbid clause could prevent the forbid from triggering. This issue requires the integrator to use toCedarExpr() to build policy text at runtime from user-controlled input. This vulnerability has been fixed in versions 2.3.6, 3.4.1, and 4.9.0.

• CWE-94

• https://github.com/cedar-policy/cedar-java/security/advisories/GHSA-qmch-v2q9-wg4p

Published

Jul 13, 2026

Last Modified

Jul 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55766guzzlehttp/psr7 is a PSR-7 HTTP message library implementati…4.8
• CVE-2026-55767Guzzle is an extensible PHP HTTP client. Prior to 7.12.1, Co…5.8
• CVE-2026-55768GoAccess is a real-time web log analyzer and interactive vie…8.7
• CVE-2026-5577A vulnerability has been found in Song-Li cross_browser up t…8.6
• CVE-2026-55771CedarJava is an open source Java implementation of the Cedar…8.8
• CVE-2026-55772CedarJava is an open source Java implementation of the Cedar…8.8
• CVE-2026-55777GoAccess is a real-time web log analyzer and interactive vie…5.3
• CVE-2026-55778Parse Server is an open source backend that can be deployed …2.1
• CVE-2026-5578A vulnerability was found in CodeAstro Online Classroom 1.0.…6.3
• CVE-2026-55780NanaZip is the 7-Zip derivative intended for the modern Wind…2.4
• CVE-2026-55781NanaZip is the 7-Zip derivative intended for the modern Wind…2.4
• CVE-2026-55782NanaZip is the 7-Zip derivative intended for the modern Wind…2.4