-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/authzed/spicedb | go | < 1.30.1 | 1.30.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of subject set merging in SubjectByTypeSet.Map. The pre-patch code directly assigned subjectset to mapped.byType[key] without checking for existing entries (CWE-755). The fix introduced cloning and unioning of existing sets when a key collision occurred. The added test TestSubjectSetMapOverSameSubjectDifferentRelation explicitly verifies this merging behavior, confirming this was the failure point. The vulnerability manifests specifically when mapping multiple relations of the same subject type through an arrow (->) operator, matching the described attack scenario.