CVE-2026-82579: AshAi Tool Loop Infinite Loop Vulnerability
Summary
CVE-2026-82579: AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service. Affects ash_ai across 2 version ranges.
>= 0.6.0, < 1.0.0
>= bc2122f78fca6c11d8ec2b9ac53148ec17476460, < 53325fdab90afab628c6a53232ef2a9001580bd9
Fixed in 1.0.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
AshAi is a tool developed by the Ash Project that leverages AI models to perform various tasks through tool calls. It is designed to enhance user interactions by allowing dynamic responses based on model outputs. However, the tool is susceptible to a specific vulnerability that can lead to denial of service, impacting its functionality and user experience.
Vulnerability Detail
The vulnerability arises from an infinite loop condition in the AshAi.ToolLoop class. When all tool calls are filtered out due to invalid names or reused tool_call_ids, the loop continues to execute without termination. This can lead to unbounded model requests, effectively causing a denial of service. An attacker can exploit this by injecting prompts that cause the model to re-emit spent tool_call_ids, resulting in the loop never advancing and exhausting system resources.
How To Fix
Latest published version: 1.4.0 as of 22 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.0.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available to mitigate the effects of this vulnerability without applying the patch. It is recommended to update to the fixed version as soon as possible.
Conclusion
CVE-2026-82579 is a significant vulnerability in the AshAi tool that can lead to denial of service through an infinite loop condition. It is crucial for users to update to the patched version 1.0.0 or later to mitigate this risk. Utilizing tools like Vulert can help in monitoring and identifying such vulnerabilities in real-time.
See every vulnerability recorded for ash_ai →
FAQ
CVE-2026-82579 is a vulnerability in the AshAi tool that allows an attacker to cause an infinite loop, leading to denial of service.
You can check if your application is affected by using Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to use the Vulert playground.
The primary consequence is denial of service, where the tool becomes unresponsive due to the infinite loop, potentially exhausting system resources.
You can update the AshAi package by running the command mix deps.update ash_ai in your terminal.
Yes, the CVSS score for this vulnerability is 6.0, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for ash_ai.
