AUTH0-AI-LANGCHAIN · CVE-2026-108167 · AI agents & MCP
FIX → 1.0.2 · 1.0.3 ✓ verified
The auth0-ai-python FGA retriever does not separate authorization checks made for different users, relations or conditions during retrieval-augmented generation. Documents that Auth0 FGA denied can end up in the model context and in the generated answer.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Apps using the FGARetriever from auth0-ai-langchain or auth0-ai-llamaindex for RAG, when a single retrieval returns multiple documents that map to the same Auth0 FGA object but are checked under different users, relations or conditions. Documents FGA denied can then reach the model context and the answer. Apps that do not use the FGA retriever, or whose documents each map to a distinct object with one user and relation, can skip it.
Not affected if distinct-fga-object-per-document, no-fga-retriever
Who cares auth0-ai-python, auth0-fga, langchain, llamaindex, python, rag
pip show auth0-ai-langchain auth0-ai-llamaindex (or check requirements/poetry.lock)1.0.2 or auth0-ai-llamaindex < AND your code uses FGARetriever where one retrieval returns several documents that map to the same FGA object but need different users, relations or contextsThe auth0-ai-python FGA retriever does not distinguish between authorization checks under different users, relations, or conditions when filtering documents during retrieval-augmented generation, resulting in documents denied by Auth0 FGA being included in the model context and used in the generated response.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
1.0.3Upgrade to 1.0.2 · 1.0.3
Upgrade auth0-ai-langchain to 1.0.2 or later and auth0-ai-llamaindex to 1.0.3 or later.