Skip to content

Product

open-policy-agent github.com/open-policy-agent/opa/v1/server vulnerabilities

1 published CVE affecting open-policy-agent github.com/open-policy-agent/opa/v1/server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest open-policy-agent github.com/open-policy-agent/opa/v1/server CVEs

Newest publication first

  1. CVE-2025-46569 OPA server Data API HTTP path injection of Rego

    Published
    HighCVSS 7.4 EPSS 0.54%

    Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for reading and writing documents. Requesting a virtual document through the Data API entails policy evaluation, where a Rego query...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.