CVE-2026-114214 | Ash-Project Ash up to 3.34.6 Relationships relationships.ex lateral_join? improper authorization

October 25, 2026 Yanac

A vulnerability labeled as problematic has been found in Ash-Project Ash up to 3.34.6. Impacted is the function lateral_join? of the file lib/ash/actions/read/relationships.ex of the component Relationships. Executing a manipulation can lead to improper authorization.

This vulnerability is registered as CVE-2026-114214. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More