CVE-2026-55866

2 advisories.

Go/github.com/authzed/spicedb CVE-2026-55866: low 3.7, EPSS 0.34%

SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected

Action: Upgrade github.com/authzed/spicedb to 1.54.0 or later.

go get github.com/authzed/spicedb@v1.54.0

Affected

introduced	fixed	last affected
1.34.0	1.54.0	-

Fixed versions

1.54.0

Sources

CVE-2026-55866 · published 2026-06-19T21:42:12Z · modified 2026-06-25T18:56:25.905406286Z · JSON

Go/github.com/authzed/spicedb CVE-2026-55866: unknown, EPSS 0.34%

SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

Action: Upgrade github.com/authzed/spicedb to 1.54.0 or later.

go get github.com/authzed/spicedb@v1.54.0

Affected

introduced	fixed	last affected
1.34.0	1.54.0	-

Fixed versions

1.54.0

Sources

CVE-2026-55866 · published 2026-06-25T18:26:48Z · modified 2026-06-25T18:45:25.282481592Z · JSON