Login Request a demo
OP
Product
openfga
by openfga · last CVE Sep 16, 2026
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 11High 7Medium 9Low 0
Severity
All severities27Critical11High7Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add openfga to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33729
9.8
0%
Mar 27
OpenFGA has an Authorization Bypass through cached keys
Affected: < 1.13.1
CVE-2025-55213
9.8
0%
Aug 18
OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar
Affected: 1.9.3 before 1.9.5
CVE-2025-46331
9.8
0%
Apr 30
OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar
Affected: 1.3.6 before 1.8.11
CVE-2025-25196
9.8
0%
Feb 19
OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar
Affected: before 1.8.5
CVE-2024-56323
9.8
0%
Jan 13
OpenFGA is an authorization/permission engine
Affected: 1.3.8 before 1.8.3
CVE-2024-42473
9.8
1%
Aug 12
OpenFGA is an authorization/permission engine
Affected: 1.5.7; 1.5.8
CVE-2024-31452
9.8
1%
Apr 16
OpenFGA is a high-performance and flexible authorization/permission engine
Affected: 1.5.0 before 1.5.3
CVE-2022-23542
9.8
1%
Dec 20
OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar
Affected: before 0.3.1
CVE-2022-39352
9.8
0%
Nov 8
OpenFGA is a high-performance authorization/permission engine inspired by Google Zanzibar
Affected: before 0.2.5
CVE-2022-39342
9.8
1%
Oct 25
OpenFGA Authorization Bypass
Affected: < 0.2.4
CVE-2022-39341
9.8
1%
Oct 25
OpenFGA Authorization Bypass
Affected: < 0.2.4
Showing 11