TI-2026-69858 Aliases CVE-2026-101028

Ash.count, Ash.exists and Ash.aggregate skip related read policies

MEDIUM 60CWE-863Published 2026-10-09 · Updated 2026-10-09

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: Present
Impact type: Security bypass
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-863.

Summary

The ash package from 2.6.0 before 3.34.6 by ash-project is affected. Its aggregate path, used by Ash.count, Ash.exists and Ash.aggregate, applies only the root resource's read policy and skips related resources' read policies on filters and sorts (CWE-863). A remote attacker with low privileges can test conditions against related rows they cannot read and infer their existence and attribute values.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 (lib/ash/actions/aggregate.ex) applied only the root resource's read policy before running the aggregate query. The read path also applies each related resource's read policy to filter and sort references that cross a relationship, directly (for example comments.body) or through an aggregate over one, but the aggregate path skipped that step. A caller whose filter or sort reaches these functions, for example through Ash.Query.filter_input/2, an ash_lua script, or an AshAi tool offering count or exists results, can test conditions against related rows hidden from them and recover their existence and attribute values one query at a time. Ash.read/2 and its page counts are not affected. This issue affects ash: from 2.6.0 before 3.34.6.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00341 27th percentileScored 2026-11-07

Fix Fixed ash (ash-project): 3.34.6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
ash-project	ash	2.6.0 to before 3.34.6	3.34.6	Patch available	CNA

ash Vendorash-project Affected 2.6.0 to before 3.34.6 Fixed in 3.34.6 Patch available CNA

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:ash-project:ash::::::::	—	—	—

cpe:2.3:a:ash-project:ash:*:*:*:*:*:*:*:* Versions — — ·—

Remediation

Upgrade ash to version 3.34.6, the fixed version listed for ash-project ash.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Fix · CNA ash (ash-project) Fixed in 3.34.6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Not affected: 4 products

Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9

Timeline

2026-10-09 Threatist record created from CVE-2026-101028
2026-10-10 CISA SSVC decision points changed
2026-10-13 Affected versions changed · Red Hat

References

Patch 1

Fix commit 8093618 in ash-project/ash

Advisory 1

GHSA-xj24-8f5c-pp5p

Other 3

TI-2026-56298 Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service CVSS 4.0HIGH 8.7
TI-2026-52572 Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter CVSS 4.0HIGH 8.7
TI-2026-57010 Path traversal in AshAdmin file uploads via unsanitized client filename CVSS 4.0HIGH 8.3
TI-2026-26840 Ash Framework: Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash CVSS 4.0HIGH 8.2
TI-2026-54252 EEx template evaluation of prompt content in AshAi enables remote code execution CVSS 4.0HIGH 8.9
TI-2026-54208 Stored XSS in AshAdmin relationship typeahead via unescaped label_field content CVSS 4.0HIGH 8.4

See all 90 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences