Go/github.com/openfga/openfga CVE-2026-55170: unknown, EPSS 0.34%

OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Action: Upgrade github.com/openfga/openfga to 1.18.0 or later.

go get github.com/openfga/openfga@v1.18.0

Affected

Fixed versions

Sources

• osv: GO-2026-5322
• https://github.com/openfga/openfga/security/advisories/GHSA-cf98-j28v-49v6

CVE-2026-55170 · published 2026-06-25T18:43:19Z · modified 2026-06-25T19:45:28.699370948Z · JSON