CVE-2026-78230: AshAi Aggregate Tool Exposes Protected Fields
Summary
CVE-2026-78230: AshAi aggregate tool can read field-policy-protected fields. Affects ash_ai across 2 version ranges.
>= 0.1.0, < 1.0.3
>= 2ba234b50946a3b8116190c8467f9f4dfa5edce7, < 9c02de581625c342c9870a672830bff28c1d701e
Fixed in 1.0.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
AshAi is a tool designed for aggregating and manipulating data within the Ash framework. It allows users to perform various read actions, including aggregating data using functions like min, max, sum, and avg. However, it has a vulnerability that permits unauthorized access to sensitive fields that should be protected by field policies.
Vulnerability Detail
The vulnerability arises from AshAi's handling of read actions, specifically its aggregate functions. While Ash field policies are meant to restrict access to sensitive fields, the aggregate functions do not respect these policies. This means that an actor can request an aggregate value for a field they should not have access to, potentially exposing sensitive personal information (PII). The issue is particularly concerning for fields that are marked as public but are restricted by per-actor policies. This oversight could lead to unauthorized data exposure and privacy violations.
How To Fix
Latest published version: 1.4.0 as of 22 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.0.3
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can avoid exposing the AshAi read tool over resources that have field policies restricting access to certain fields. This will prevent actors from being able to request aggregate values for sensitive fields until the package is updated.
Conclusion
CVE-2026-78230 presents a significant risk for applications using the AshAi tool, as it allows unauthorized access to sensitive fields through aggregate functions. It is crucial to update to the patched version to safeguard against potential data exposure.
See every vulnerability recorded for ash_ai →
FAQ
CVE-2026-78230 is a vulnerability in the AshAi aggregate tool that allows unauthorized access to field-policy-protected fields through aggregate functions.
If your application uses AshAi and exposes read tools with restricted fields, this vulnerability could allow unauthorized users to access sensitive data.
You should update your AshAi package to version 1.0.3 or later to mitigate the risk associated with this vulnerability.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities. You can check your application's vulnerability status using the Vulert playground without any signup.
The CVSS score for CVE-2026-78230 is 6.0, indicating a moderate level of severity.
Related vulnerabilities
Recent vulnerabilities recorded for ash_ai.
