Ash-Project Ash Ai
5 CVEs affecting Ash-Project Ash Ai. Latest disclosed: 2026-08-31. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82580 | | 2026-08-31 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal error text to chat users. In AshAi.ToolLoo… | |
CVE-2026-82579 | | 2026-08-31 | Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can influence a model's output to hang the tool… | |
CVE-2026-82564 | | 2026-08-31 | Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller of an identity-configured tool to update or destroy record… | |
CVE-2026-75760 | | 2026-08-31 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider request state and credentials in a user-fac… | |
CVE-2026-77956 | | 2026-08-31 | Improper Control of Generation of Code (Code Injection) vulnerability in ash-project ash_ai allows a remote, unauthenticated client to execute arbitrary Elixir… |