CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-46331

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.10 to v1.3.6 (Helm chart <= openfga-0.2.28, docker <= v.1.8.10) are vulnerable to authorization bypass when certain Check and ListObject calls are executed. This issue has been patched in version 1.8.11.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.8%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2025-46331

Openfga » Helm Charts » Version: 0.1.36

cpe:2.3:a:openfga:helm_charts:0.1.36
Openfga » Helm Charts » Version: 0.1.37

cpe:2.3:a:openfga:helm_charts:0.1.37
Openfga » Helm Charts » Version: 0.1.38

cpe:2.3:a:openfga:helm_charts:0.1.38
Openfga » Helm Charts » Version: 0.1.39

cpe:2.3:a:openfga:helm_charts:0.1.39
Openfga » Helm Charts » Version: 0.1.40

cpe:2.3:a:openfga:helm_charts:0.1.40
Openfga » Helm Charts » Version: 0.1.41

cpe:2.3:a:openfga:helm_charts:0.1.41
Openfga » Helm Charts » Version: 0.2.0

cpe:2.3:a:openfga:helm_charts:0.2.0
Openfga » Helm Charts » Version: 0.2.1

cpe:2.3:a:openfga:helm_charts:0.2.1
Openfga » Helm Charts » Version: 0.2.10

cpe:2.3:a:openfga:helm_charts:0.2.10
Openfga » Helm Charts » Version: 0.2.11

cpe:2.3:a:openfga:helm_charts:0.2.11
Openfga » Helm Charts » Version: 0.2.12

cpe:2.3:a:openfga:helm_charts:0.2.12
Openfga » Helm Charts » Version: 0.2.13

cpe:2.3:a:openfga:helm_charts:0.2.13
Openfga » Helm Charts » Version: 0.2.14

cpe:2.3:a:openfga:helm_charts:0.2.14
Openfga » Helm Charts » Version: 0.2.15

cpe:2.3:a:openfga:helm_charts:0.2.15
Openfga » Helm Charts » Version: 0.2.16

cpe:2.3:a:openfga:helm_charts:0.2.16
Openfga » Helm Charts » Version: 0.2.17

cpe:2.3:a:openfga:helm_charts:0.2.17
Openfga » Helm Charts » Version: 0.2.18

cpe:2.3:a:openfga:helm_charts:0.2.18
Openfga » Helm Charts » Version: 0.2.19

cpe:2.3:a:openfga:helm_charts:0.2.19
Openfga » Helm Charts » Version: 0.2.2

cpe:2.3:a:openfga:helm_charts:0.2.2
Openfga » Helm Charts » Version: 0.2.20

cpe:2.3:a:openfga:helm_charts:0.2.20
Openfga » Helm Charts » Version: 0.2.21

cpe:2.3:a:openfga:helm_charts:0.2.21
Openfga » Helm Charts » Version: 0.2.22

cpe:2.3:a:openfga:helm_charts:0.2.22
Openfga » Helm Charts » Version: 0.2.23

cpe:2.3:a:openfga:helm_charts:0.2.23
Openfga » Helm Charts » Version: 0.2.24

cpe:2.3:a:openfga:helm_charts:0.2.24
Openfga » Helm Charts » Version: 0.2.25

cpe:2.3:a:openfga:helm_charts:0.2.25
Openfga » Helm Charts » Version: 0.2.26

cpe:2.3:a:openfga:helm_charts:0.2.26
Openfga » Helm Charts » Version: 0.2.27

cpe:2.3:a:openfga:helm_charts:0.2.27
Openfga » Helm Charts » Version: 0.2.28

cpe:2.3:a:openfga:helm_charts:0.2.28
Openfga » Helm Charts » Version: 0.2.3

cpe:2.3:a:openfga:helm_charts:0.2.3
Openfga » Helm Charts » Version: 0.2.4

cpe:2.3:a:openfga:helm_charts:0.2.4
Openfga » Helm Charts » Version: 0.2.5

cpe:2.3:a:openfga:helm_charts:0.2.5
Openfga » Helm Charts » Version: 0.2.6

cpe:2.3:a:openfga:helm_charts:0.2.6
Openfga » Helm Charts » Version: 0.2.7

cpe:2.3:a:openfga:helm_charts:0.2.7
Openfga » Helm Charts » Version: 0.2.8

cpe:2.3:a:openfga:helm_charts:0.2.8
Openfga » Helm Charts » Version: 0.2.9

cpe:2.3:a:openfga:helm_charts:0.2.9
Openfga » Openfga » Version: 1.3.10

cpe:2.3:a:openfga:openfga:1.3.10
Openfga » Openfga » Version: 1.3.6

cpe:2.3:a:openfga:openfga:1.3.6
Openfga » Openfga » Version: 1.3.7

cpe:2.3:a:openfga:openfga:1.3.7
Openfga » Openfga » Version: 1.3.8

cpe:2.3:a:openfga:openfga:1.3.8
Openfga » Openfga » Version: 1.3.9

cpe:2.3:a:openfga:openfga:1.3.9
Openfga » Openfga » Version: 1.4.0

cpe:2.3:a:openfga:openfga:1.4.0
Openfga » Openfga » Version: 1.4.1

cpe:2.3:a:openfga:openfga:1.4.1
Openfga » Openfga » Version: 1.4.2

cpe:2.3:a:openfga:openfga:1.4.2
Openfga » Openfga » Version: 1.4.3

cpe:2.3:a:openfga:openfga:1.4.3
Openfga » Openfga » Version: 1.5.0

cpe:2.3:a:openfga:openfga:1.5.0
Openfga » Openfga » Version: 1.5.1

cpe:2.3:a:openfga:openfga:1.5.1
Openfga » Openfga » Version: 1.5.2

cpe:2.3:a:openfga:openfga:1.5.2
Openfga » Openfga » Version: 1.5.3

cpe:2.3:a:openfga:openfga:1.5.3
Openfga » Openfga » Version: 1.5.4

cpe:2.3:a:openfga:openfga:1.5.4
Openfga » Openfga » Version: 1.5.5

cpe:2.3:a:openfga:openfga:1.5.5
Openfga » Openfga » Version: 1.5.6

cpe:2.3:a:openfga:openfga:1.5.6
Openfga » Openfga » Version: 1.5.7

cpe:2.3:a:openfga:openfga:1.5.7
Openfga » Openfga » Version: 1.5.8

cpe:2.3:a:openfga:openfga:1.5.8
Openfga » Openfga » Version: 1.5.9

cpe:2.3:a:openfga:openfga:1.5.9
Openfga » Openfga » Version: 1.6.0

cpe:2.3:a:openfga:openfga:1.6.0
Openfga » Openfga » Version: 1.6.1

cpe:2.3:a:openfga:openfga:1.6.1
Openfga » Openfga » Version: 1.6.2

cpe:2.3:a:openfga:openfga:1.6.2
Openfga » Openfga » Version: 1.7.0

cpe:2.3:a:openfga:openfga:1.7.0
Openfga » Openfga » Version: 1.8.0

cpe:2.3:a:openfga:openfga:1.8.0
Openfga » Openfga » Version: 1.8.1

cpe:2.3:a:openfga:openfga:1.8.1
Openfga » Openfga » Version: 1.8.10

cpe:2.3:a:openfga:openfga:1.8.10
Openfga » Openfga » Version: 1.8.2

cpe:2.3:a:openfga:openfga:1.8.2
Openfga » Openfga » Version: 1.8.3

cpe:2.3:a:openfga:openfga:1.8.3
Openfga » Openfga » Version: 1.8.4

cpe:2.3:a:openfga:openfga:1.8.4
Openfga » Openfga » Version: 1.8.5

cpe:2.3:a:openfga:openfga:1.8.5
Openfga » Openfga » Version: 1.8.6

cpe:2.3:a:openfga:openfga:1.8.6
Openfga » Openfga » Version: 1.8.7

cpe:2.3:a:openfga:openfga:1.8.7
Openfga » Openfga » Version: 1.8.8

cpe:2.3:a:openfga:openfga:1.8.8
Openfga » Openfga » Version: 1.8.9

cpe:2.3:a:openfga:openfga:1.8.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-46331

Products

Pricing

Contact Us