CVE-2026-81315 | ash-project ash_ai up to 0.9.x Origin Validation AshAi.Mcp.Server.origin_allowed dns rebinding

August 31, 2026 Yanac

A vulnerability labeled as critical has been found in ash-project ash_ai up to 0.9.x. Impacted is the function AshAi.Mcp.Server.origin_allowed of the component Origin Validation. Executing a manipulation can lead to reliance on reverse dns resolution.

The identification of this vulnerability is CVE-2026-81315. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More