CVE-2026-80223 | ash-project ash_graphql up to 1.10.x Subscription Resolver Ash.can privileges management

August 30, 2026 Yanac

A vulnerability classified as problematic was found in ash-project ash_graphql up to 1.10.x. The affected element is the function Ash.can of the component Subscription Resolver. The manipulation results in improper privilege management.

This vulnerability is cataloged as CVE-2026-80223. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More