Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-78216— AshLua eval read operations can read field-policy-protected fields via aggregates

Quick assessment

Affected
ash-project ash_lua
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

AshLua 通过 动作将 Ash 的读取操作暴露给 Lua 脚本。其中， 调用接受一个聚合操作（包括 、 、 、 、 、 ），它会针对指定字段构建一个临时的 ，并返回其原始值。 Ash 的字段策略（field policies）会对返回记录中被禁止的字段进行脱敏处理（将其替换为 ），但这种脱敏机制并不适用于聚合值。因此，脚本可以通过将某个字段作为聚合操作（而非普通字段读取）来绕过字段策略的限制，从而读取调用者原本被字段策略禁止的字段。这包括那些虽然标记为 但按角色（actor）进行了权限限制的字段，例如敏感的个人

CVSS 6.0 · Medium EPSS 0.25% · P16

Possible ATT&CK Techniques 1 AI

T1056.001 · Keylogging

Affected Version Matrix 2

VendorProduct Version RangeStatus
ash-project ash_lua 0.1.0< 0.2.2 affected
8675e47cca81f36594083a7e63379bac9e123e72< 266a5dcc56d5015b6d316c10606169e753b07450 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-78216

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
AshLua eval read operations can read field-policy-protected fields via aggregates
Source: CVE Program / CVE List V5
Vulnerability Description
AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, min, max, first, sum, avg) that builds an ad-hoc Ash.Query.Aggregate over a named field and returns its raw value. Ash field policies redact forbidden fields on returned records (replacing them with %Ash.ForbiddenField{}), but that redaction does not apply to aggregate values. A script could therefore read a field the calling actor's field policies forbid by requesting it as an aggregate instead of as a field. This includes fields that are public? true but restricted per-actor by a field policy, such as sensitive PII. The prior hardening only enforced the exposed-field allow-list (field visibility), which is a separate axis from per-actor field-policy authorization. The fix authorizes the aggregated field against the resource's field policies, so aggregating over a field the actor may not see is refused or scoped to the rows where it is visible. This issue affects ash_lua: from 0.1.0 before 0.2.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1220
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
ash-project ash_lua 0.1.0 ~ 0.2.2 cpe:2.3:a:ash-project:ash_lua:*:*:*:*:*:*:*:*
ash-project ash_lua 8675e47cca81f36594083a7e63379bac9e123e72 ~ 266a5dcc56d5015b6d316c10606169e753b07450 cpe:2.3:a:ash-project:ash_lua:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-78216

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-78216

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-78216 (1)

Vendor Advisories for CVE-2026-78216 (3)

Same Patch Batch · ash-project · 2026-09-08 · 3 CVEs total

CVE-2026-78230 6.0 MEDIUM AshAi aggregate tool can read field-policy-protected fields
CVE-2026-82710 2.3 LOW Terminal escape sequence injection in mix usage_rules.search_docs via package documentatio

IV. Related Vulnerabilities

Same product: ash_lua
Same vendor: ash-project
Same weakness: CWE-1220

V. Comments for CVE-2026-78216

No comments yet

Leave a comment