Go/github.com/openfga/openfga CVE-2025-48371: high 8.8, EPSS 0.50%

OpenFGA Authorization Bypass in github.com/openfga/openfga

Action: Upgrade github.com/openfga/openfga to 1.8.13 or later.

go get github.com/openfga/openfga@v1.8.13

Affected

Fixed versions

Sources

• osv: GO-2025-3707
• nvd: CVE-2025-48371
• https://github.com/openfga/openfga/commit/e5960d4eba92b723de8ff3a5346a07f50c1379ca
• https://github.com/openfga/openfga/security/advisories/GHSA-c72g-53hw-82q7

CVE-2025-48371 · published 2025-05-27T20:47:04Z · modified 2026-02-04T04:15:19.418001Z · JSON