Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. In versions prior to 1.13.1, under specific conditions, models using conditions with caching enabled can result in two different check requests producing the same cache key. This can result in OpenFGA reusing an earlier cached result for a different request. Users are affected if the model has relations which rely on condition evaluation andncaching is enabled. OpenFGA v1.13.1 contains a patch.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-33729 OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. In versions prior to 1.13.1, under sp… https://www.cve.org/CVERecord?id=CVE-2026-33729
Post summary
The text merely notes the existence of CVE‑2026‑33729 in OpenFGA versions before 1.13.1 and provides a link to the CVE record, offering no further details on exploitation or mitigation.
⚡ New CVE Alert: CVE-2026-33729 📊 Severity: 5.8 🚨 Risk Level: Medium 🧩 Affects: Google Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-33729 #CVE-2026-33729 #CVE #Medium #Google #CyberSecurity #InfoSec https://t.co/sWccyatuk9
Post summary
A simple tweet announces CVE‑2026‑33729 with a moderate severity score of 5.8 and directs readers to the NVD for details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openfga | openfga | - | - | - |