AshAI identity_tool filter allows unauthorized record update/delete (CVE-2026-82564)

Vulnerability Key Information Summary Vulnerability Overview CVE ID: CVE-2026-82564 Title: filter in AshAI accepts operator maps, allowing the update or deletion of unidentified records Severity: HIGH (7.1) CWE: CWE-698 (Authorization Bypass via User-Controllable Key-Value Pairs) Publication Date: 2026-08-31 (published and updated on the same day) Scope of Impact Affected Component: (AshAI project) Affected Versions: are affected; all other versions are not affected Repository: (Hex.pm / Repository) Affected Commits: through are affected CPE: Vulnerability Description The update-style filter constructed by is derived directly from two tool parameters: and passed into . Because parses map values as predicate expressions rather than literals, a caller can send and, combined with and / , can constrain the write or record-update expression to any row that returns , thereby updating or deleting unidentified records. This fix impacts versions from 0.6.0 up to (but not including) 1.0.0. Attack Patterns (WEAKNESSES & ATTACK PATTERNS) WEAKNESS: CWE-698 Authorization Bypass via User-Controllable Key-Value Pairs (in catalog / MITRE) ATTACK PATTERN: CAPEC-77 Manipulating User-Controllable Variables (MITRE) Remediation Fixed version: and later (the affected range is ; upgrading to ≥1.0.0 eliminates this vulnerability) POC / Exploit Code The page does not contain a standalone POC code block or exploit code; the exploitation method is described only in text: Send Combine with and / Constrain the write or record-update expression to any row that returns , enabling the update/deletion of unidentified records Other Information CVSS Vector: Credits: Peter Ulrich (Finder), Jonathan Männchen / EEF (Reporter / Demonstration developer), Zach Daniel / Ash Project (Demonstration developer), Jonathan Männchen / EEF (Contributor) Reference Links: - (GHSA-jg86-xh36-h5xc, vendor advisory) - (8f76168d, patch) - (mirror)

Goal Reached Thanks to every supporter — we hit 100%!

AshAI identity_tool filter allows unauthorized record update/delete (CVE-2026-82564)