CVE-2026-55170 OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions

OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorizationmodel identifier columns can compare case-distinct values such as...

CGA-6HP4-WMM6-XMHX

Bulletin has no description...

CGA-2PQ2-9PXF-CX2V

Bulletin has no description...

CGA-P6MR-JP48-F5W4

Bulletin has no description...

CGA-V85Q-HW7Q-C7HG

Bulletin has no description...

MINI-QP7H-CQR2-4M7J

Bulletin has no description...

MINI-C2M7-8RJG-22WX

Bulletin has no description...

MINI-CW74-HC9Q-5XJJ

Bulletin has no description...

MINI-XJQ8-HQ49-7PJR

Bulletin has no description...

MINI-59P5-23VJ-9VF7

Bulletin has no description...

MINI-C6VH-8W5W-9GJ7

Bulletin has no description...

CVE-2026-55590

creationtimestamp| type| source ---|---|--- 2026-07-09 20:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaj36nun627 2026-07-13 23:27:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqktqzssjo27...

MINI-HXX6-7JRJ-C2FX

Bulletin has no description...

MINI-QHGP-5PRV-7MQP

Bulletin has no description...

MINI-W5GX-V4FM-HQR6

Bulletin has no description...

MINI-6MVJ-R6C8-XV6H

Bulletin has no description...

CGA-RFHW-X9WW-9233

Bulletin has no description...

MINI-999J-4MC9-9Q99

Bulletin has no description...

MINI-R9R9-F6FC-9M7Q

Bulletin has no description...

CVE-2026-59148

creationtimestamp| type| source ---|---|--- 2026-07-09 20:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqaibfx7pc24...