CVE-2026-81643 | ash-project ash_graphql up to 1.10.x Subscription Batcher AshGraphql.Subscription.Batcher.do_send improper authorization

A vulnerability has been found in ash-project ash_graphql up to 1.10.x and classified as problematic. This impacts the function AshGraphql.Subscription.Batcher.do_send of the component Subscription Batcher. Performing a manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-81643. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More