Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9.0, under certain circumstances, improper input handling could allow Cedar-expression injection via unescaped toCedarExpr(). The toCedarExpr() method on Cedar Value types does not escape special characters (" or \) when converting values to Cedar source code. If an integrator uses toCedarExpr() to build policy text at runtime from user-controlled values, an actor could inject arbitrary Cedar expressions. For example, injecting || true into a permit ... when { ... } clause could make the permit unconditional, or injecting && false into a forbid clause could prevent the forbid from triggering. This issue requires the integrator to use toCedarExpr() to build policy text at runtime from user-controlled input. This vulnerability has been fixed in versions 2.3.6, 3.4.1, and 4.9.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-55773 CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9… https://www.cve.org/CVERecord?id=CVE-2026-55773
Post summary
The fragment merely notes that specific versions of CedarJava are affected by CVE‑2026‑55773, without providing any further technical, exploitative, or mitigation details.
🚨*CVE* CVE-2026-55773 CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9… https://www.cve.org/CVERecord?id=CVE-2026-55773 ----- Traducción: CVE-2026-55773 Ced… http://infoflow.cloud`
Post summary
CVE-2026-55773 is disclosed as a vulnerability affecting older versions of the open‑source CedarJava implementation, with limited technical details provided. No proof of exploitation or mitigation is mentioned.