CVE-2026-82749 | ash-project ash up to 3.32.1 Relationships relationships.ex resolve_parent_in_filter improper authorization

September 1, 2026 Yanac

A vulnerability described as problematic has been identified in ash-project ash up to 3.32.1. Affected is the function resolve_parent_in_filter of the file lib/ash/actions/read/relationships.ex of the component Relationships. Executing a manipulation can lead to improper authorization.

This vulnerability appears as CVE-2026-82749. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More