AS
Product
ash_ai
7
CVEs
0
On KEV
8.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 3Low 0
Watch
Add ash_ai to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77956 | 8.9 | Aug 31 | EEx template evaluation of prompt content in AshAi enables remote code execution Affected: 0.1.0 before 1.0.0; 4aab131d40a0bd5a8cf0b3c4eaaa59d49565f3d1 before e9948254b5659c1143b73dc2f59f457931e64514 |
| CVE-2026-81315 | 7.4 | Aug 31 | MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header Affected: 0.8.0 before 1.0.0; c94f0b17fbe252f68755ba512678586164ba6139 before 28af68d73134df0b8fb3aa6ab03e8fd795b07c21 |
| CVE-2026-75760 | 7.1 | Aug 31 | AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error Affected: 0.1.0 before 1.0.0; 5334edc73a007f0629661761d6a75796f2fc0004 before 088a2562e16d65f36cec178070de683636479f58 |
| CVE-2026-82564 | 7.1 | Aug 31 | Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records Affected: 0.6.0 before 1.0.0; bc2122f78fca6c11d8ec2b9ac53148ec17476460 before 87f616d5bfbf7af43346f0701ae17f853789a602 |
| CVE-2026-78230 | 6.0 | Sep 8 | AshAi aggregate tool can read field-policy-protected fields Affected: 0.1.0 before 1.0.3; 2ba234b50946a3b8116190c8467f9f4dfa5edce7 before 9c02de581625c342c9870a672830bff28c1d701e |
| CVE-2026-82579 | 6.0 | Aug 31 | AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service Affected: 0.6.0 before 1.0.0; bc2122f78fca6c11d8ec2b9ac53148ec17476460 before 53325fdab90afab628c6a53232ef2a9001580bd9 |
| CVE-2026-82580 | 5.3 | Aug 31 | AshAi echoes raw tool exception messages into the conversation, disclosing internal details Affected: 0.6.0 before 1.0.0; bc2122f78fca6c11d8ec2b9ac53148ec17476460 before c68dfbdb220426dc015b58379e95bde8e9f0995a |
Showing 7