A vulnerability described as problematic has been identified in cedar-policy CedarJava up to 4.8.x. Impacted is the function
EntityIdentifier.equals of the component Entity Identifier. Such manipulation leads to incorrect comparison.
This vulnerability is uniquely identified as CVE-2026-55771. Local access is required to approach this attack. No exploit exists.