A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s functions.
{ "nvd_published_at": "2024-08-30T13:15:12Z", "cwe_ids": [ "CWE-294" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-09-19T19:47:47Z" }