CVE-2026-55170— OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions
Possible ATT&CK Techniques 1AI
T1552.001 · Credentials In FilesGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-55170
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions
Source: NVD (National Vulnerability Database)
Vulnerability Description
OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorization_model identifier columns can compare case-distinct values such as user:Alice and user:alice as equivalent, causing two distinct check requests to return the same response. This issue is fixed in 1.18.0.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
大小写敏感处理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenFGA 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenFGA是OpenFGA团队开源的一款为开发人员构建并受 Google Zanzibar 启发的高性能和灵活的授权/许可引擎。 OpenFGA 1.18.0之前版本存在输入验证错误漏洞，该漏洞源于将MySQL作为数据存储时，元组、变更日志和授权模型标识符列对大小写不敏感，可能导致两个不同的检查请求返回相同响应。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-55170
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-55170
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-55170 (2)
Vendor Advisories for CVE-2026-55170 (1)
- 🔗 OpenFGA Improper Policy Enforcement · Advisory · openfga/openfga · GitHubx_refsource_CONFIRM
Vendor Pages for CVE-2026-55170 (1)
IV. Related Vulnerabilities
Same product: openfga
- CVE-2026-55689
OpenFGA: OIDC audience validation skipped when --authn-oidc- - CVE-2026-48096
OpenFGA: Cache-key delimiter injection in openfga/openfga sh - CVE-2026-41131
OpenFGA has Improper Policy Enforcement - CVE-2026-40293
OpenFGA Playground Preshared Key Exposure - CVE-2026-34972
OpenFGA's BatchCheck within-request deduplication produces i
Same vendor: openfga
- CVE-2026-55689
OpenFGA: OIDC audience validation skipped when --authn-oidc- - CVE-2026-48096
OpenFGA: Cache-key delimiter injection in openfga/openfga sh - CVE-2026-41131
OpenFGA has Improper Policy Enforcement - CVE-2026-40293
OpenFGA Playground Preshared Key Exposure - CVE-2026-34972
OpenFGA's BatchCheck within-request deduplication produces i
Same weakness: CWE-178
- CVE-2026-62230
Grav < 2.0.4 File Access Bypass via Case Variation - CVE-2026-54528
jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows - CVE-2026-54763
Traefik: headerField underscore-variant identity spoofing in - CVE-2026-14617
NousResearch hermes-agent Streaming Reasoning Tag Filter str - CVE-2026-58057
Flowise - Custom MCP Environment Variable Denylist Bypass vi
V. Comments for CVE-2026-55170
No comments yet