{"action":"Upgrade github.com/openfga/openfga to 1.18.0 or later.","affected":[{"fixed":"1.18.0","introduced":"0"}],"component":"github.com/openfga/openfga","cve_ids":["CVE-2026-55170"],"ecosystem":"Go","epss":0.00339,"exploited":false,"fixed_versions":["1.18.0"],"ghsa_id":"GHSA-cf98-j28v-49v6","id":"tcs_01M5KGKFY5MDP888KEPQQ26MBQ","modified_at":"2026-06-25T19:45:28.699370948Z","published_at":"2026-06-25T18:43:19Z","references":["https://osv.dev/vulnerability/GO-2026-5322","https://github.com/openfga/openfga/security/advisories/GHSA-cf98-j28v-49v6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5322","url":"https://osv.dev/vulnerability/GO-2026-5322"}],"summary":"OpenFGA Improper Policy Enforcement in github.com/openfga/openfga"}