CVE-2025-49011
LOW
Published 2025-06-06T17:36:21.747Z
Actions:
CVSS Score
V3.1
3.7
/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score Metrics
Exploitability: N/A
Impact: N/A
Attack Vector Metrics
Impact Metrics
Description
SpiceDB is an open source database for storing and querying fine-grained authorization data. Prior to version 1.44.2, on schemas involving arrows with caveats on the arrow’ed relation, when the path to resolve a CheckPermission request involves the evaluation of multiple caveated branches, requests may return a negative response when a positive response is expected. Version 1.44.2 fixes the issue. As a workaround, do not use caveats in the schema over an arrow’ed relation.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
References
Published: 2025-06-06T17:36:21.747Z
Last Modified: 2025-06-06T21:33:23.317Z
Copied to clipboard!