8 matches found
CVE-2026-119613
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai allows a caller of an AshAi tool to read internal error details, including module names and data values, by making a tool call fail. AshAi.ToToolError gained an implementation for...
CVE-2026-119613 AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal details
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai allows a caller of an AshAi tool to read internal error details, including module names and data values, by making a tool call fail. AshAi.ToToolError gained an implementation for...
CVE-2026-119613 AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal details
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai allows a caller of an AshAi tool to read internal error details, including module names and data values, by making a tool call fail. AshAi.ToToolError gained an implementation for...
EUVD-2026-120053
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai allows a caller of an AshAi tool to read internal error details, including module names and data values, by making a tool call fail. AshAi.ToToolError gained an implementation for...
CVE-2026-119613
The ash-project ash_ai library (versions 1.5.0 before 1.5.1 ) contains a vulnerability where internal error details are disclosed to callers. The root cause is that AshAi.ToToolError returns the error's error field as-is, which AshAi.Tool.Errors.format/1 then sends to MCP clients and the model. T...
EEF-CVE-2026-119613 AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal details
Summary Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai allows a caller of an AshAi tool to read internal error details, including module names and data values, by making a tool call fail. AshAi.ToToolError gained an implementation for...
CVE-2026-119613: ash-project ash_ai: Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai allows a caller of an…
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai allows a caller of an AshAi tool to read internal error details, including module names and data values, by making a tool call fail. AshAi.ToToolError gained an implementation for...
PT-2026-140409
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash ai allows a caller of an AshAi tool to read internal error details, including module names and data values, by making a tool call fail. AshAi.ToToolError gained an implementation for...