Skip to main content

grpc

Browse all articles, tutorials, and guides about grpc

1posts

Posts

Security
|8 min read

The gRPC-Go Auth Bypass Hiding in Your Dependency Tree: CVE-2026-33186

A missing leading slash lets requests slip past gRPC-Go authorization rules. It is a CVSS 9.1, it is fixed in 1.79.3, and because gRPC-Go is a transitive dependency in a huge slice of cloud-native Go, you may be shipping it without knowing. Here is how to find out.