CVE-2026-96581 | Ash-Project Ash up to 3.37.1 Create create.ex Ash.Actions.Create authorization

October 26, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Ash-Project Ash up to 3.37.1. This affects the function Ash.Actions.Create of the file lib/ash/actions/create/create.ex of the component Create. The manipulation leads to authorization bypass.

This vulnerability is traded as CVE-2026-96581. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More