CVE-2025-64751 | OpenFGA up to 1.11.0 ListObject Call improper authorization

November 21, 2025 Yanac

A vulnerability labeled as critical has been found in OpenFGA up to 1.11.0. The impacted element is an unknown function of the component ListObject Call Handler. Such manipulation leads to improper authorization.

This vulnerability is listed as CVE-2025-64751. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More