Vulnerability in Ash-project Ash

CVE-2026-70395

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a relationship to a record they cannot name, and to recover the secret value used to look it up. When manage_rela…

Affected products

  • Ash-project Ash — versions 1.52.0-rc.11, 571c138140e71cea24005189f45d7a63c8d2ed20

Weakness classification (CWE)

References