Auth bypass in Ash-project Ash
CVE-2025-48043
Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/authorizer/authorizer.ex and program routines 'Elixir.Ash.Policy.Authorizer':strict_f…
Vulnerability class: Broken Access Control
EPSS: 0.005 (37.8th percentile) — read the EPSS interpretation.
Affected products
- Ash-project Ash — versions 0.1.0, 0, 4c41344126b0aba09ec3085517000f8aefec299e
Weakness classification (CWE)
References
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related, vendor-advisory)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)