CVE-2026-82754 | ash-project ash_authentication_oauth2_server up to 0.3.0 Routing Router.ex oauth2_server_protocol_routes missing initialization

SecurityVulns
Yanac

A vulnerability was found in ash-project ash_authentication_oauth2_server up to 0.3.0. It has been declared as critical. This issue affects the function oauth2_server_protocol_routes of the file AshAuthentication/Phoenix/Oauth2Server/Router.ex of the component Routing. The manipulation results in missing initialization of a variable.

This vulnerability was named CVE-2026-82754. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More