Medium severity6.1NVD Advisory· Published Aug 30, 2024· Updated Jun 17, 2026

CVE-2024-8260

Description

A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s functions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/open-policy-agent/opaGo	< 0.68.0	0.68.0

Affected products

114

osv-coords113 versions
pkg:apk/chainguard/conftest pkg:apk/chainguard/conftest-fips pkg:apk/chainguard/cosign pkg:apk/chainguard/cosign-fips pkg:apk/chainguard/datadog-agent pkg:apk/chainguard/datadog-agent-core-integrations pkg:apk/chainguard/datadog-agent-core-integrations-fips pkg:apk/chainguard/datadog-agent-fakeintake pkg:apk/chainguard/datadog-agent-fakeintake-fips pkg:apk/chainguard/datadog-agent-fips pkg:apk/chainguard/datadog-agent-jmx pkg:apk/chainguard/datadog-agent-jmx-fips pkg:apk/chainguard/datadog-agent-oci-compat pkg:apk/chainguard/datadog-agent-oci-compat-fips pkg:apk/chainguard/datadog-agent-s6-overlay pkg:apk/chainguard/datadog-agent-s6-overlay-fips pkg:apk/chainguard/datadog-cluster-agent pkg:apk/chainguard/datadog-cluster-agent-fips pkg:apk/chainguard/datadog-cluster-agent-oci-compat pkg:apk/chainguard/datadog-cluster-agent-oci-compat-fips pkg:apk/chainguard/dogstatsd pkg:apk/chainguard/gatekeeper-3.17 pkg:apk/chainguard/gatekeeper-3.17-compat pkg:apk/chainguard/gatekeeper-3.17-crds pkg:apk/chainguard/gatekeeper-3.17-crds-compat pkg:apk/chainguard/gatekeeper-3.17-gator pkg:apk/chainguard/gatekeeper-fips-3.17 pkg:apk/chainguard/gatekeeper-fips-3.17-compat pkg:apk/chainguard/k8sgpt pkg:apk/chainguard/kots pkg:apk/chainguard/kots-compat pkg:apk/chainguard/kots-symlink-compat pkg:apk/chainguard/kubescape pkg:apk/chainguard/kyverno-1.11 pkg:apk/chainguard/kyverno-1.12 pkg:apk/chainguard/kyverno-background-controller-1.11 pkg:apk/chainguard/kyverno-background-controller-1.12 pkg:apk/chainguard/kyverno-background-controller-fips-1.11 pkg:apk/chainguard/kyverno-background-controller-fips-1.12 pkg:apk/chainguard/kyverno-cleanup-controller-1.11 pkg:apk/chainguard/kyverno-cleanup-controller-1.12 pkg:apk/chainguard/kyverno-cleanup-controller-fips-1.11 pkg:apk/chainguard/kyverno-cleanup-controller-fips-1.12 pkg:apk/chainguard/kyverno-cli-1.11 pkg:apk/chainguard/kyverno-cli-1.12 pkg:apk/chainguard/kyverno-cli-fips-1.11 pkg:apk/chainguard/kyverno-cli-fips-1.12 pkg:apk/chainguard/kyverno-fips-1.11 pkg:apk/chainguard/kyverno-fips-1.12 pkg:apk/chainguard/kyverno-init-container-1.11 pkg:apk/chainguard/kyverno-init-container-1.12 pkg:apk/chainguard/kyverno-init-container-fips-1.11 pkg:apk/chainguard/kyverno-init-container-fips-1.12 pkg:apk/chainguard/kyverno-reports-controller-1.11 pkg:apk/chainguard/kyverno-reports-controller-1.12 pkg:apk/chainguard/kyverno-reports-controller-fips-1.11 pkg:apk/chainguard/kyverno-reports-controller-fips-1.12 pkg:apk/chainguard/opa pkg:apk/chainguard/policy-controller pkg:apk/chainguard/policy-controller-fips pkg:apk/chainguard/policy-controller-tester pkg:apk/chainguard/policy-controller-tester-fips pkg:apk/chainguard/policy-controller-webhook pkg:apk/chainguard/snyk-cli pkg:apk/chainguard/spire-agent pkg:apk/chainguard/spire-agent-fips pkg:apk/chainguard/spire-oidc-discovery-provider pkg:apk/chainguard/spire-oidc-discovery-provider-fips pkg:apk/chainguard/spire-server pkg:apk/chainguard/spire-server-fips pkg:apk/chainguard/tfsec pkg:apk/chainguard/zarf pkg:apk/chainguard/zot pkg:apk/wolfi/conftest pkg:apk/wolfi/cosign pkg:apk/wolfi/cosign-fips pkg:apk/wolfi/datadog-agent pkg:apk/wolfi/datadog-agent-core-integrations pkg:apk/wolfi/datadog-agent-fakeintake pkg:apk/wolfi/datadog-agent-jmx pkg:apk/wolfi/datadog-agent-oci-compat pkg:apk/wolfi/datadog-agent-s6-overlay pkg:apk/wolfi/datadog-cluster-agent pkg:apk/wolfi/datadog-cluster-agent-oci-compat pkg:apk/wolfi/dogstatsd pkg:apk/wolfi/gatekeeper-3.17 pkg:apk/wolfi/gatekeeper-3.17-compat pkg:apk/wolfi/gatekeeper-3.17-crds pkg:apk/wolfi/gatekeeper-3.17-crds-compat pkg:apk/wolfi/gatekeeper-3.17-gator pkg:apk/wolfi/k8sgpt pkg:apk/wolfi/kots pkg:apk/wolfi/kots-compat pkg:apk/wolfi/kots-symlink-compat pkg:apk/wolfi/kubescape pkg:apk/wolfi/kyverno-1.12 pkg:apk/wolfi/kyverno-background-controller-1.12 pkg:apk/wolfi/kyverno-cleanup-controller-1.12 pkg:apk/wolfi/kyverno-cli-1.12 pkg:apk/wolfi/kyverno-init-container-1.12 pkg:apk/wolfi/kyverno-reports-controller-1.12 pkg:apk/wolfi/opa pkg:apk/wolfi/policy-controller pkg:apk/wolfi/policy-controller-tester pkg:apk/wolfi/policy-controller-webhook pkg:apk/wolfi/snyk-cli pkg:apk/wolfi/spire-agent pkg:apk/wolfi/spire-oidc-discovery-provider pkg:apk/wolfi/spire-server pkg:apk/wolfi/tfsec pkg:apk/wolfi/zarf pkg:apk/wolfi/zot pkg:golang/github.com/open-policy-agent/opa
< 0.55.0-r2+ 112 more
- (no CPE)range: < 0.55.0-r2
- (no CPE)range: < 0.55.0-r2
- (no CPE)range: < 2.4.0-r4
- (no CPE)range: < 2.4.0-r3
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.64.1-r0
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.64.1-r0
- (no CPE)range: < 7.64.1-r0
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.64.1-r0
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.64.1-r0
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.64.1-r0
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.64.1-r0
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.64.1-r0
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 0.3.42-r1
- (no CPE)range: < 1.117.2-r1
- (no CPE)range: < 1.117.2-r1
- (no CPE)range: < 1.117.2-r1
- (no CPE)range: < 3.0.18-r0
- (no CPE)range: < 1.11.5-r16
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.11.5-r16
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.11.5-r21
- (no CPE)range: < 1.12.7-r9
- (no CPE)range: < 1.11.5-r16
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.11.5-r21
- (no CPE)range: < 1.12.7-r9
- (no CPE)range: < 1.11.5-r16
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.11.5-r21
- (no CPE)range: < 1.12.7-r9
- (no CPE)range: < 1.11.5-r21
- (no CPE)range: < 1.12.7-r9
- (no CPE)range: < 1.11.5-r16
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.11.5-r21
- (no CPE)range: < 1.12.7-r9
- (no CPE)range: < 1.11.5-r16
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.11.5-r21
- (no CPE)range: < 1.12.7-r9
- (no CPE)range: < 0.68.0-r0
- (no CPE)range: < 0.9.0-r10
- (no CPE)range: < 0.12.0-r7
- (no CPE)range: < 0.9.0-r10
- (no CPE)range: < 0.12.0-r7
- (no CPE)range: < 0.9.0-r10
- (no CPE)range: < 1.1293.1-r1
- (no CPE)range: < 1.11.2-r5
- (no CPE)range: < 1.12.0-r0
- (no CPE)range: < 1.11.2-r5
- (no CPE)range: < 1.12.0-r0
- (no CPE)range: < 1.11.2-r5
- (no CPE)range: < 1.12.0-r0
- (no CPE)range: < 1.28.10-r2
- (no CPE)range: < 0.40.1-r1
- (no CPE)range: < 2.1.1-r2
- (no CPE)range: < 0.55.0-r2
- (no CPE)range: < 2.4.0-r4
- (no CPE)range: < 2.4.0-r3
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 7.56.2-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 3.17.1-r2
- (no CPE)range: < 0.3.42-r1
- (no CPE)range: < 1.117.2-r1
- (no CPE)range: < 1.117.2-r1
- (no CPE)range: < 1.117.2-r1
- (no CPE)range: < 3.0.18-r0
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 1.12.5-r4
- (no CPE)range: < 0.68.0-r0
- (no CPE)range: < 0.9.0-r10
- (no CPE)range: < 0.9.0-r10
- (no CPE)range: < 0.9.0-r10
- (no CPE)range: < 1.1293.1-r1
- (no CPE)range: < 1.11.2-r5
- (no CPE)range: < 1.11.2-r5
- (no CPE)range: < 1.11.2-r5
- (no CPE)range: < 1.28.10-r2
- (no CPE)range: < 0.40.1-r1
- (no CPE)range: < 2.1.1-r2
- (no CPE)range: < 0.68.0
Styra/OPAv5
Range: 0

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-c77r-fh37-x2pxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-8260ghsaADVISORY
www.tenable.com/security/research/tra-2024-36nvdThird Party AdvisoryWEB
github.com/open-policy-agent/opa/commit/10f4d553e6bb6ae9c69611ecdd9a77dda857070eghsaWEB
github.com/open-policy-agent/opa/releases/tag/v0.68.0ghsaWEB
pkg.go.dev/vuln/GO-2024-3141ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000