CVE-2026-115635 | ash-project ash_postgres up to 2.15.1 DataLayer do_bulk_create/upsert improper authorization

October 25, 2026 Yanac

A vulnerability marked as problematic has been reported in ash-project ash_postgres up to 2.15.1. The affected element is the function do_bulk_create/upsert of the component DataLayer. The manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-115635. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More