Ash managed relationship lookup bypasses authorization
Ash passes client-supplied lookup values to Ash.Query.filter/2 without type casting in managed belongs_to relationships; a nested map forges filter expressions, enabling unauthorized record access. CVSS 4.0: 2.1 Low.
- Vendor
- ash-project
- Product
- Ash
- CVSS
- 2.1
- EPSS (exploit probability)
- 0.2%
- Status
- patched
- Published
Is CVE-2026-70395 being exploited?
Not on any exploited-vulnerability catalog we track. CVE-2026-70395 was not on the CISA, ENISA or CIRCL exploited catalogs as of our 2026-11-13 snapshot. That can change quickly; check the write-up below for the latest reporting.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 0.2% (scored October 14, 2026).
- CISA KEV[ — ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-11-13. Full cross-catalog view: /kev-comparison
CVE-2026-70395 timeline
- First 0dayNews coveragesame day as NVD
- Published to NVD
Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON
When manage_relationship is configured with on_lookup: :relate on a belongs_to relationship, Ash forwards the client-supplied lookup value to Ash.Query.filter/2 before casting it to the declared attribute type. A client submitting a nested map where a scalar is expected causes the framework to treat the map as a filter expression, not a literal ID. This allows an attacker to forge a relationship to a record they cannot legitimately name and to recover the secret value used to look it up — bypassing record-level authorization policies that govern relationship creation but not the lookup path.
The Erlang Ecosystem Foundation CNA scored this CVSS 4.0: 2.1 Low (Local attack vector, Attack Requirements: Present). Despite the low base score, the authorization bypass impacts confidentiality and integrity for any data reachable via affected belongs_to relationships.
Mitigation: Update to a patched Ash release. See the CNA advisory for affected version ranges and the fix commit. NVD entry: CVE-2026-70395.
Other ash-project CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-77956 AshAI Evaluates Model Output as Live Elixir Codewrite-up | [ CRITICAL ] | — | 0.3% | — |
| CVE-2026-69659 Ash keyset pagination cursor triggers node OOMwrite-up | [ MEDIUM ] | 5.9 | 0.4% | — |
