CVE-2026-107372

Conditional document permissions could be lost during AI retrieval

Okta/Auth0 · Auth0 AI JavaScript FGA retriever

First documented disclosure · Review checkpoint

Summary

The retriever treated different authorization conditions as equivalent for documents tied to the same object, user and relation. A denied document could enter the model context and influence its answer.

Severity and exploitation evidence

Medium · 6.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The retriever treated different authorization conditions as equivalent for documents tied to the same object, user and relation.

Conditions required

One retrieval evaluated documents with differing contexts under conditional Auth0 FGA checks.

Potential impact

A denied document could enter the model context and influence its answer.

Affected versions and configurations

The CNA lists versions before 6.0.3. Okta’s advisory says before 6.0.2 and leaves 6.0.2 ambiguous.

Fix and mitigation status

6.0.3.

Practical next steps

Upgrade @auth0/ai to 6.0.3 or later and verify retrieval against documents with distinct authorization conditions.

Operating lesson

Check the authority granted to the affected component against the operation a user expects.

Evidence and limits

The CVE record was published on 2026-11-10.

Sources