CVE-2026-81316— Same-named aggregates with differing filters are conflated in AshSql
Quick assessment
Affected
ash-project ash_sql
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ash-project 中的 ash_sql 存在授权校验不当的漏洞，允许调用方获取本应被更严格过滤条件排除的数据行的聚合值，从而泄露跨越授权边界或租户边界的计数、求和或列表结果。 仅在两个聚合查询的过滤条件和排序条件同时不同才判定为不同查询。由于聚合查询很少携带排序条件，因此两个同名但过滤条件完全不同的聚合会被错误地判定为相同。发生冲突的聚合保留其名称，并被系统视为“已计算过”， 会直接返回首个注册的版本所计算的值。当将演员（actor）或租户（tenant）上下文注入到每个聚合查询的过滤条件中时，同一个名称可能
Possible ATT&CK Techniques 1 AI
T1529 · System Shutdown/Reboot
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-81316
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Same-named aggregates with differing filters are conflated in AshSql
Source: CVE Program / CVE List V5
Vulnerability Description
Incorrect Authorization vulnerability in ash-project ash_sql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclosing counts, sums, or lists across an authorization or tenancy boundary.
AshSql.Aggregate.different_queries?/2 reports two aggregate queries as different only when their filter and their sort both differ. Aggregate queries rarely carry a sort, so two aggregates that share a name but carry entirely different filters compare as identical. The colliding aggregate keeps its name and is treated as already computed, and select_aggregates returns the first-registered variant's value. The same name reaches the builder twice with different filters when actor or tenant context is stamped into each aggregate's query, so a narrowly filtered aggregate can be served the value of a previously registered broad one.
This issue affects ash_sql: from 0.1.0 before 0.7.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ash-project | ash_sql | 0.1.0 ~ 0.7.1 |
cpe:2.3:a:ash-project:ash_sql:*:*:*:*:*:*:*:*
|
|
| ash-project | ash_sql | dd092ed273dec7bd2194352f24a39229fc8ae68b ~ 4b95468e5434a3526571414219719c9518be6694 |
cpe:2.3:a:ash-project:ash_sql:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-81316
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-81316
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-81316 (1)
Vendor Advisories for CVE-2026-81316 (3)
-
🔗 EEF-CVE-2026-81316 - OSV related
-
-
Same Patch Batch · ash-project · 2026-08-30 · 11 CVEs total
| CVE-2026-75847 | 5.9 MEDIUM | Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail |
| CVE-2026-77970 | 5.9 MEDIUM | Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions |
| CVE-2026-78038 | 5.9 MEDIUM | Job argument injection via :args overrides primary_key and tenant in AshOban |
| CVE-2026-78228 | 5.9 MEDIUM | Unbounded handle_error recursion enables denial of service in AshOban triggers |
| CVE-2026-77454 | 5.9 MEDIUM | exists/2 predicate silently dropped on limited relationships with a parent() filter in Ash |
| CVE-2026-77831 | 2.1 LOW | Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking |
| CVE-2026-77846 | 2.1 LOW | JSON path injection via unescaped get_path segments in AshSqlite |
| CVE-2026-81318 | 2.1 LOW | Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql |
| CVE-2026-78691 | 2.1 LOW | Unescaped backslash allows LIKE wildcard injection in AshSql string search |
| CVE-2026-80227 | 2.1 LOW | SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql |
IV. Related Vulnerabilities
Same product: ash_sql
-
CVE-2026-77454
exists/2 predicate silently dropped on limited relationships -
CVE-2026-81318
Distinct-query aggregate drops the tenant schema prefix, lea -
CVE-2026-78691
Unescaped backslash allows LIKE wildcard injection in AshSql -
CVE-2026-80227
SQL string_trim removes only spaces, diverging from in-memor
Same vendor: ash-project
-
CVE-2026-77454
exists/2 predicate silently dropped on limited relationships -
CVE-2026-81318
Distinct-query aggregate drops the tenant schema prefix, lea -
CVE-2026-78691
Unescaped backslash allows LIKE wildcard injection in AshSql -
CVE-2026-80227
SQL string_trim removes only spaces, diverging from in-memor -
CVE-2026-78228
Unbounded handle_error recursion enables denial of service i
Same weakness: CWE-863
-
CVE-2026-82634
Frappe Framework Development Branch Incorrect Authorization -
CVE-2026-77454
exists/2 predicate silently dropped on limited relationships -
CVE-2026-81318
Distinct-query aggregate drops the tenant schema prefix, lea -
CVE-2026-82463
pac4j-core before 6.5.6 Authorization Bypass via Reversed Pr -
CVE-2026-62904
Microsoft Edge (Chromium-based) Information Disclosure Vulne
V. Comments for CVE-2026-81316
No comments yet