Auth0 AI Python improper document access GHSA-43rq-mx95-c3xx

Evidence record

Primary or origin disclosure used to qualify the underlying mechanism, stated prerequisites and limits. CVE-2026-108167 GHSA-43rq-mx95-c3xx: Auth0 FGA retrieval adapter mixes user/relation/condition contexts when several documents share same FGA object. Denied document can enter RAG model input and answer despite correct backend authorization.

Read the original source ↗

Claim-level citations (3)

• supportsAuth0 FGA RAG adapters could retrieve documents under the wrong authorization context: The Auth0 AI Python advisory distinguishes the resource-object check from an individual document entitlement: when multiple documents share the same FGA object, a retriever could mix user, relation or condition contexts and place a disallowed document into RAG input.

  GHSA-43rq-mx95-c3xx, Description and affected retrieval adapters

• supportsAuth0 FGA RAG adapters could retrieve documents under the wrong authorization context: The upstream advisory does not identify a real customer leak, and its affected-version wording needs to be reconciled with the published fixed packages.

  GHSA-43rq-mx95-c3xx, affected auth0-ai-langchain and auth0-ai-llamaindex versions and access control impact

• supportsAuth0 FGA RAG adapters could retrieve documents under the wrong authorization context: Auth0 AI Python retrieval adapters could conflate user, relation or condition contexts where documents shared an underlying Fine-Grained Authorization object. A denied document could therefore enter the language model retrieval context despite the policy store correctly denying that particular access.

  GHSA-43rq-mx95-c3xx, affected auth0-ai-langchain and auth0-ai-llamaindex versions and access control impact