CVE-2026-82681— Query-parameter injection in AshAdmin row-action links via unencoded string primary keys
Quick assessment
Affected
ash-project ash_admin
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ash-project 中的 存在输出未正确编码或转义的漏洞，允许控制记录字符串主键的攻击者重写 AshAdmin 中“行操作”链接的目标地址。 其 Table、DataTable 和 Show 组件在构建行操作 URL 时，通过原始字符串插值，将主键（以及表名、域和资源名）直接拼接进查询字符串，而未进行 URL 编码。Ash 资源通常使用用户可设置的字符串主键（如 slug、邮箱等）。由于 Plug.Conn.Query 在解析重复参数时采用“后出现的参数覆盖先出现的参数”（last-wins）策略，且 是在最后
Possible ATT&CK Techniques 2 AI
T1195 · Supply Chain Compromise T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82681
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Query-parameter injection in AshAdmin row-action links via unencoded string primary keys
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's string primary key rewrite the target of AshAdmin's row-action links.
The Table, DataTable, and Show components built row-action URLs by raw string interpolation, splicing the primary key (and table, domain, and resource names) into the query string without URL-encoding. Ash resources routinely use user-settable string primary keys (slugs, emails). Because Plug.Conn.Query resolves duplicate parameters last-wins and primary_key is interpolated last, a stored key such as foo&action_type=destroy injects parameters that override the link, so an admin clicking edit is sent to a destroy form or an arbitrary resource; a # truncates the query into a fragment. The fix builds every link with URI.encode_query/1, encoding all interpolated values.
This issue affects ash_admin: from 0.3.0-rc.0 before 1.3.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
对输出编码和转义不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ash-project | ash_admin | 0.3.0-rc.0 ~ 1.3.1 |
cpe:2.3:a:ash-project:ash_admin:*:*:*:*:*:*:*:*
|
|
| ash-project | ash_admin | b214535f0cc012e36ca621e643bf8f7b133ba354 ~ 8e8ef91e8ba07498053887c6212f8b0f08178df6 |
cpe:2.3:a:ash-project:ash_admin:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-82681
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82681
请登录查看更多情报信息。
Other References for CVE-2026-82681 (4)
-
https://github.com/ash-project/ash_admin/security/advisories/GHSA-j89q-xjrh-c26p vendor-advisory related
Same Patch Batch · ash-project · 2026-08-31 · 13 CVEs total
| CVE-2026-77956 | 10.0 CRITICAL | EEx template evaluation of prompt content in AshAi enables remote code execution |
| CVE-2026-77850 | 8.4 HIGH | Stored XSS in AshAdmin relationship typeahead via unescaped label_field content |
| CVE-2026-82673 | 8.3 HIGH | Path traversal in AshAdmin file uploads via unsanitized client filename |
| CVE-2026-82722 | 8.3 HIGH | AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node D |
| CVE-2026-75757 | 8.3 HIGH | AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a |
| CVE-2026-81315 | 7.4 HIGH | MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header |
| CVE-2026-75760 | 7.1 HIGH | AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a us |
| CVE-2026-82564 | 7.1 HIGH | Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unident |
| CVE-2026-82579 | 6.0 MEDIUM | AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of |
| CVE-2026-82580 | 5.3 MEDIUM | AshAi echoes raw tool exception messages into the conversation, disclosing internal detail |
| CVE-2026-81853 | 2.3 LOW | AshAdmin composite primary key decoding accepts arbitrary fields, enabling a secret-attrib |
| CVE-2026-81852 | 2.1 LOW | AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass |
IV. Related Vulnerabilities
Same product: ash_admin
-
CVE-2026-82673
Path traversal in AshAdmin file uploads via unsanitized clie -
CVE-2026-81853
AshAdmin composite primary key decoding accepts arbitrary fi -
CVE-2026-81852
AshAdmin ships a hardcoded CSP nonce, allowing nonce-based C -
CVE-2026-77850
Stored XSS in AshAdmin relationship typeahead via unescaped -
CVE-2026-82722
AshAdmin LiveView events intern atoms from client input, exh
Same vendor: ash-project
-
CVE-2026-82673
Path traversal in AshAdmin file uploads via unsanitized clie -
CVE-2026-81853
AshAdmin composite primary key decoding accepts arbitrary fi -
CVE-2026-81852
AshAdmin ships a hardcoded CSP nonce, allowing nonce-based C -
CVE-2026-77850
Stored XSS in AshAdmin relationship typeahead via unescaped -
CVE-2026-82722
AshAdmin LiveView events intern atoms from client input, exh
Same weakness: CWE-116
-
CVE-2026-55859
MariaDB Connector/R2DBC: Inappropriate Encoding for Output C -
CVE-2026-55891
PrivateBin: Reflected JSON injection in backend responses vi -
CVE-2026-82249
gitoxide before 0.38.2 Credential Helper Protocol Field Inje -
CVE-2026-81522
Cross-tenant database retargeting via dot/NUL injection in n -
CVE-2026-81685
openssl_encrypt before 1.4.9 Text Injection via Recovery Slo
V. Comments for CVE-2026-82681
No comments yet