ash-project ash_ai

• CVE-2026-78230 Medium 6.0 AshAi aggregate tool can read field-policy-protected fields 0.4%
• CVE-2026-75760 High 7.1 AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error 0.5%
• CVE-2026-82580 Medium 5.3 AshAi echoes raw tool exception messages into the conversation, disclosing internal details 0.5%
• CVE-2026-82579 Medium 6.0 AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service 0.5%
• CVE-2026-82564 High 7.1 Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records 0.5%
• CVE-2026-81315 High 7.4 MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header 0.3%
• CVE-2026-77956 High 8.9 EEx template evaluation of prompt content in AshAi enables remote code execution 0.3%