# ash\_ai (Hex) vulnerabilities

7 known vulnerabilities (4 high, 3 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://hex.pm/packages/ash_ai

## Advisories (7)

### [CVE-2026-78230](https://cve.now/CVE-2026-78230): AshAi aggregate tool can read field-policy-protected fields

- Severity: Medium 6.0
- Published: Sep 8, 2026
- Affected: from 0.1.0, fixed in 1.0.3; from 0.1.0, fixed in 1.0.3.

### [CVE-2026-75760](https://cve.now/CVE-2026-75760): AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

- Severity: High 7.1
- Published: Aug 31, 2026
- Affected: from 0.1.0, fixed in 1.0.0; from 0.1.0, fixed in 1.0.0.

### [CVE-2026-82580](https://cve.now/CVE-2026-82580): AshAi echoes raw tool exception messages into the conversation, disclosing internal details

- Severity: Medium 5.3
- Published: Aug 31, 2026
- Affected: from 0.6.0, fixed in 1.0.0; from 0.6.0, fixed in 1.0.0.

### [CVE-2026-82579](https://cve.now/CVE-2026-82579): AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service

- Severity: Medium 6.0
- Published: Aug 31, 2026
- Affected: from 0.6.0, fixed in 1.0.0; from 0.6.0, fixed in 1.0.0.

### [CVE-2026-82564](https://cve.now/CVE-2026-82564): Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records

- Severity: High 7.1
- Published: Aug 31, 2026
- Affected: from 0.6.0, fixed in 1.0.0; from 0.6.0, fixed in 1.0.0.

### [CVE-2026-81315](https://cve.now/CVE-2026-81315): MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header

- Severity: High 7.4
- Published: Aug 31, 2026
- Affected: from 0.8.0, fixed in 1.0.0; from 0.8.0, fixed in 1.0.0.

### [CVE-2026-77956](https://cve.now/CVE-2026-77956): EEx template evaluation of prompt content in AshAi enables remote code execution

- Severity: High 8.9
- Published: Aug 31, 2026
- Affected: from 0.1.0, fixed in 1.0.0; from 0.1.0, fixed in 1.0.0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/hex/ash_ai
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.