SB20261111123 - Incorrect authorization in auth0-ai-js

Description

This security bulletin contains information about 1 vulnerability.

1) Incorrect authorization (CVE-ID: CVE-2026-107372)

CWE-ID: CWE-863 - Incorrect Authorization

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to disclose document content that authorization checks deny them access to through generated responses.

The vulnerability exists due to incorrect authorization in the auth0-ai-js FGA retriever when filtering documents during retrieval-augmented generation with Auth0 FGA conditional checks. A remote user can trigger retrieval in which authorization checks under different conditions are not distinguished, causing denied documents to be included in the model context and disclosing their content through generated responses.

Exploitation requires a single retrieval to include multiple documents that share the same object, user, and relation but differ by authorization context.

Remediation

Install update from vendor's website.

References

• https://trust.okta.com/security-advisories/improper-access-control-in-auth0-ai-js-document-retrieval-cve-2026-107372
• https://github.com/auth0/auth0-ai-js/security/advisories/GHSA-rcmp-9f79-cfm9