Skip to content
Ash-project Ash Ai vulnerabilities
-
ash-project ash ai
AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal details
CVE-2026-119613
Fix available
5.3 Medium
-
ash-project ash ai
AshAi aggregate tool can read field-policy-protected fields
CVE-2026-78230
Fix available
6.0 Medium
-
ash-project ash ai
AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error
CVE-2026-75760
Fix available
7.1 High
-
ash-project ash ai
AshAi echoes raw tool exception messages into the conversation, disclosing internal details
CVE-2026-82580
Fix available
5.3 Medium
-
ash-project ash ai
AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service
CVE-2026-82579
Fix available
6.0 Medium
-
ash-project ash ai
Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records
CVE-2026-82564
Fix available
7.1 High
-
ash-project ash ai
MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header
CVE-2026-81315
Fix available
7.4 High
-
ash-project ash ai
EEx template evaluation of prompt content in AshAi enables remote code execution
CVE-2026-77956
Fix available
8.9 High