Security Advisory

CVE-2025-48044

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-17 13:52:53

Last updated 2026-07-24 14:13:58

Assigner EEF

CVSS score 8.6

State PUBLISHED

Description

Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/policy.ex and program routines 'Elixir.Ash.Policy.Policy':expression/2. This issue affects ash: from 3.6.3 before 3.7.1.

← Browse all CVEs View on cve.org ↗