Go/github.com/openfga/openfga CVE-2025-46331: critical 9.8, EPSS 0.40%

OpenFGA Authorization Bypass

Action: Upgrade github.com/openfga/openfga to 1.8.11 or later.

go get github.com/openfga/openfga@v1.8.11

Affected

Fixed versions

Sources

• osv: GHSA-w222-m46c-mgh6
• nvd: CVE-2025-46331
• https://github.com/openfga/openfga/security/advisories/GHSA-w222-m46c-mgh6
• https://github.com/openfga/openfga/commit/244302e7a8b979d66cc1874a3899cdff7d47862f
• https://github.com/openfga/openfga

CVE-2025-46331 · published 2025-04-30T16:43:33Z · modified 2026-09-10T03:49:36.550292281Z · JSON