CVE-2025-48043: Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization | LiveThreat CVE Feed — Verisq

Login Request a demo

High severity · published Oct 10, 2025

CVE-2025-48043

Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization

8.6

CVSS

0.4%

EPSS

No

On KEV

Description

Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This issue affects ash: from 0.1.1 before 3.6.2.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 33% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AS

ash · ash-project

0.1.1 before 3.6.2; 4c41344126b0aba09ec3085517000f8aefec299e before 66d81300065b970da0d2f4528354835d2418c7ae · source: vendor

Affected product

AS

ash

ash-project

References

https://nvd.nist.gov/vuln/detail/CVE-2025-48043

https://www.cve.org/CVERecord?id=CVE-2025-48043

https://cna.erlef.org/cves/CVE-2025-48043.html

https://github.com/ash-project/ash/commit/4c41344126b0aba09ec3085517000f8aefec299e

https://github.com/ash-project/ash/commit/66d81300065b970da0d2f4528354835d2418c7ae

https://github.com/ash-project/ash/security/advisories/GHSA-7r7f-9xpj-jmr7

https://osv.dev/vulnerability/EEF-CVE-2025-48043

More from ash

8.6

Authorization bypass when bypass policy condition evaluates to true

8.2

Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash

7.6

An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records

7.5

Ash Framework: Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash

7.4

Filter expression injection via forged keyset pagination cursor in Ash