CVE-2026-65633 | team-alembic ash_authentication 3.10.5/4.14.1/5.0.0-rc.0/5.0.0-rc.12 Bearer Token Authentication improper authentication

August 25, 2026 Yanac

A vulnerability was found in team-alembic ash_authentication 3.10.5/4.14.1/5.0.0-rc.0/5.0.0-rc.12 and classified as critical. This vulnerability affects the function AshAuthentication.Plug.Helpers.retrieve_from_bearer of the component Bearer Token Authentication. Such manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-65633. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More