6 matches found
CVE-2026-108167
The auth0-ai-python FGA retriever does not distinguish between authorization checks under different users, relations, or conditions when filtering documents during retrieval-augmented generation, resulting in documents denied by Auth0 FGA being included in the model context and used in the...
CVE-2026-108167
The auth0-ai-python FGA retriever does not distinguish between authorization checks under different users, relations, or conditions when filtering documents during retrieval-augmented generation, resulting in documents denied by Auth0 FGA being included in the model context and used in the...
CVE-2026-108167
The auth0-ai-python FGA retriever is vulnerable to an improper access control issue (CWE-863) during retrieval-augmented generation . The flaw exists because the retriever fails to distinguish between authorization checks for different users, relations, or conditions when filtering documents. Thi...
EUVD-2026-122933
The auth0-ai-python FGA retriever does not distinguish between authorization checks under different users, relations, or conditions when filtering documents during retrieval-augmented generation, resulting in documents denied by Auth0 FGA being included in the model context and used in the...
CVE-2026-108167: Auth0: The auth0-ai-python FGA retriever does not distinguish between authorization checks under different users, relations,…
The auth0-ai-python FGA retriever does not distinguish between authorization checks under different users, relations, or conditions when filtering documents during retrieval-augmented generation, resulting in documents denied by Auth0 FGA being included in the model context and used in the...
PT-2026-144737
The auth0-ai-python FGA retriever does not distinguish between authorization checks under different users, relations, or conditions when filtering documents during retrieval-augmented generation, resulting in documents denied by Auth0 FGA being included in the model context and used in the...