CVE-2026-82748 | ash-project ash up to 3.32.1 Aggregate aggregate.ex improper authorization

September 1, 2026 Yanac

A vulnerability marked as problematic has been reported in ash-project ash up to 3.32.1. This impacts an unknown function of the file lib/ash/actions/aggregate.ex of the component Aggregate. Performing a manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-82748. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More