CVE-2026-85500 | team-alembic ash_authentication up to 4.14.x/5.0.0-rc.13 Password Strategy improper authentication

A vulnerability was found in team-alembic ash_authentication up to 4.14.x/5.0.0-rc.13. It has been rated as critical. This issue affects the function AshAuthentication.Strategy.Password.Actions.check_user of the component Password Strategy. This manipulation causes improper authentication.

The identification of this vulnerability is CVE-2026-85500. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More