Privilege escalation in Team-alembic Ash_authentication
CVE-2025-25202
Ash Authentication is an authentication framework for Elixir applications. Applications which have been bootstrapped by the igniter installer present since AshAuthentication v4.1.0 and who have used the magic link strategy _or_ are manuall…
Vulnerability class: Privilege Escalation
EPSS: 0.003 (20.3th percentile) — read the EPSS interpretation.
Affected products
- Team-alembic Ash_authentication — versions >= 4.1.0, < 4.4.9