CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-34972

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. From 1.8.0 to 1.13.1, under specific conditions, BatchCheck calls with multiple checks sent for the same object, relation, and user combination can result in improper policy enforcement. This vulnerability is fixed in 1.14.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 11.2%

CVSS Severity

CVSS v3 Score 5.0

References

https://github.com/openfga/openfga/security/advisories/GHSA-jwvj-g8pc-cx45

Products affected by CVE-2026-34972

Openfga » Helm Charts » Version: 0.2.16

cpe:2.3:a:openfga:helm_charts:0.2.16
Openfga » Helm Charts » Version: 0.2.17

cpe:2.3:a:openfga:helm_charts:0.2.17
Openfga » Helm Charts » Version: 0.2.18

cpe:2.3:a:openfga:helm_charts:0.2.18
Openfga » Helm Charts » Version: 0.2.19

cpe:2.3:a:openfga:helm_charts:0.2.19
Openfga » Helm Charts » Version: 0.2.20

cpe:2.3:a:openfga:helm_charts:0.2.20
Openfga » Helm Charts » Version: 0.2.21

cpe:2.3:a:openfga:helm_charts:0.2.21
Openfga » Helm Charts » Version: 0.2.22

cpe:2.3:a:openfga:helm_charts:0.2.22
Openfga » Helm Charts » Version: 0.2.23

cpe:2.3:a:openfga:helm_charts:0.2.23
Openfga » Helm Charts » Version: 0.2.24

cpe:2.3:a:openfga:helm_charts:0.2.24
Openfga » Helm Charts » Version: 0.2.25

cpe:2.3:a:openfga:helm_charts:0.2.25
Openfga » Helm Charts » Version: 0.2.26

cpe:2.3:a:openfga:helm_charts:0.2.26
Openfga » Helm Charts » Version: 0.2.27

cpe:2.3:a:openfga:helm_charts:0.2.27
Openfga » Helm Charts » Version: 0.2.28

cpe:2.3:a:openfga:helm_charts:0.2.28
Openfga » Helm Charts » Version: 0.2.29

cpe:2.3:a:openfga:helm_charts:0.2.29
Openfga » Helm Charts » Version: 0.2.30

cpe:2.3:a:openfga:helm_charts:0.2.30
Openfga » Helm Charts » Version: 0.2.31

cpe:2.3:a:openfga:helm_charts:0.2.31
Openfga » Helm Charts » Version: 0.2.32

cpe:2.3:a:openfga:helm_charts:0.2.32
Openfga » Helm Charts » Version: 0.2.33

cpe:2.3:a:openfga:helm_charts:0.2.33
Openfga » Helm Charts » Version: 0.2.34

cpe:2.3:a:openfga:helm_charts:0.2.34
Openfga » Helm Charts » Version: 0.2.35

cpe:2.3:a:openfga:helm_charts:0.2.35
Openfga » Helm Charts » Version: 0.2.36

cpe:2.3:a:openfga:helm_charts:0.2.36
Openfga » Helm Charts » Version: 0.2.37

cpe:2.3:a:openfga:helm_charts:0.2.37
Openfga » Helm Charts » Version: 0.2.38

cpe:2.3:a:openfga:helm_charts:0.2.38
Openfga » Helm Charts » Version: 0.2.39

cpe:2.3:a:openfga:helm_charts:0.2.39
Openfga » Helm Charts » Version: 0.2.40

cpe:2.3:a:openfga:helm_charts:0.2.40
Openfga » Helm Charts » Version: 0.2.41

cpe:2.3:a:openfga:helm_charts:0.2.41
Openfga » Helm Charts » Version: 0.2.42

cpe:2.3:a:openfga:helm_charts:0.2.42
Openfga » Helm Charts » Version: 0.2.43

cpe:2.3:a:openfga:helm_charts:0.2.43
Openfga » Helm Charts » Version: 0.2.44

cpe:2.3:a:openfga:helm_charts:0.2.44
Openfga » Helm Charts » Version: 0.2.45

cpe:2.3:a:openfga:helm_charts:0.2.45
Openfga » Helm Charts » Version: 0.2.46

cpe:2.3:a:openfga:helm_charts:0.2.46
Openfga » Helm Charts » Version: 0.2.47

cpe:2.3:a:openfga:helm_charts:0.2.47
Openfga » Helm Charts » Version: 0.2.48

cpe:2.3:a:openfga:helm_charts:0.2.48
Openfga » Helm Charts » Version: 0.2.49

cpe:2.3:a:openfga:helm_charts:0.2.49
Openfga » Helm Charts » Version: 0.2.50

cpe:2.3:a:openfga:helm_charts:0.2.50
Openfga » Helm Charts » Version: 0.2.51

cpe:2.3:a:openfga:helm_charts:0.2.51
Openfga » Helm Charts » Version: 0.2.52

cpe:2.3:a:openfga:helm_charts:0.2.52
Openfga » Helm Charts » Version: 0.2.53

cpe:2.3:a:openfga:helm_charts:0.2.53
Openfga » Helm Charts » Version: 0.2.54

cpe:2.3:a:openfga:helm_charts:0.2.54
Openfga » Helm Charts » Version: 0.2.55

cpe:2.3:a:openfga:helm_charts:0.2.55
Openfga » Helm Charts » Version: 0.2.56

cpe:2.3:a:openfga:helm_charts:0.2.56
Openfga » Helm Charts » Version: 0.2.57

cpe:2.3:a:openfga:helm_charts:0.2.57
Openfga » Helm Charts » Version: 0.2.58

cpe:2.3:a:openfga:helm_charts:0.2.58
Openfga » Helm Charts » Version: 0.2.59

cpe:2.3:a:openfga:helm_charts:0.2.59
Openfga » Helm Charts » Version: 0.2.60

cpe:2.3:a:openfga:helm_charts:0.2.60
Openfga » Helm Charts » Version: 0.2.61

cpe:2.3:a:openfga:helm_charts:0.2.61
Openfga » Openfga » Version: 1.10.0

cpe:2.3:a:openfga:openfga:1.10.0
Openfga » Openfga » Version: 1.10.1

cpe:2.3:a:openfga:openfga:1.10.1
Openfga » Openfga » Version: 1.10.2

cpe:2.3:a:openfga:openfga:1.10.2
Openfga » Openfga » Version: 1.10.3

cpe:2.3:a:openfga:openfga:1.10.3
Openfga » Openfga » Version: 1.10.4

cpe:2.3:a:openfga:openfga:1.10.4
Openfga » Openfga » Version: 1.10.5

cpe:2.3:a:openfga:openfga:1.10.5
Openfga » Openfga » Version: 1.11.0

cpe:2.3:a:openfga:openfga:1.11.0
Openfga » Openfga » Version: 1.11.1

cpe:2.3:a:openfga:openfga:1.11.1
Openfga » Openfga » Version: 1.11.2

cpe:2.3:a:openfga:openfga:1.11.2
Openfga » Openfga » Version: 1.8.0

cpe:2.3:a:openfga:openfga:1.8.0
Openfga » Openfga » Version: 1.8.1

cpe:2.3:a:openfga:openfga:1.8.1
Openfga » Openfga » Version: 1.8.10

cpe:2.3:a:openfga:openfga:1.8.10
Openfga » Openfga » Version: 1.8.11

cpe:2.3:a:openfga:openfga:1.8.11
Openfga » Openfga » Version: 1.8.12

cpe:2.3:a:openfga:openfga:1.8.12
Openfga » Openfga » Version: 1.8.13

cpe:2.3:a:openfga:openfga:1.8.13
Openfga » Openfga » Version: 1.8.14

cpe:2.3:a:openfga:openfga:1.8.14
Openfga » Openfga » Version: 1.8.15

cpe:2.3:a:openfga:openfga:1.8.15
Openfga » Openfga » Version: 1.8.16

cpe:2.3:a:openfga:openfga:1.8.16
Openfga » Openfga » Version: 1.8.2

cpe:2.3:a:openfga:openfga:1.8.2
Openfga » Openfga » Version: 1.8.3

cpe:2.3:a:openfga:openfga:1.8.3
Openfga » Openfga » Version: 1.8.4

cpe:2.3:a:openfga:openfga:1.8.4
Openfga » Openfga » Version: 1.8.5

cpe:2.3:a:openfga:openfga:1.8.5
Openfga » Openfga » Version: 1.8.6

cpe:2.3:a:openfga:openfga:1.8.6
Openfga » Openfga » Version: 1.8.7

cpe:2.3:a:openfga:openfga:1.8.7
Openfga » Openfga » Version: 1.8.8

cpe:2.3:a:openfga:openfga:1.8.8
Openfga » Openfga » Version: 1.8.9

cpe:2.3:a:openfga:openfga:1.8.9
Openfga » Openfga » Version: 1.9.0

cpe:2.3:a:openfga:openfga:1.9.0
Openfga » Openfga » Version: 1.9.2

cpe:2.3:a:openfga:openfga:1.9.2
Openfga » Openfga » Version: 1.9.3

cpe:2.3:a:openfga:openfga:1.9.3
Openfga » Openfga » Version: 1.9.4

cpe:2.3:a:openfga:openfga:1.9.4
Openfga » Openfga » Version: 1.9.5

cpe:2.3:a:openfga:openfga:1.9.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-34972

Products

Pricing

Contact Us