CVE-2026-81316 Same-named aggregates with differing filters are conflated in AshSql

Incorrect Authorization vulnerability in ash-project ashsql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclosing counts, sums, or lists across an authorization or tenancy boundary. AshSql.Aggregate.differentqueries?/2 reports...

CVE-2026-81316 Same-named aggregates with differing filters are conflated in AshSql

Incorrect Authorization vulnerability in ash-project ashsql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclosing counts, sums, or lists across an authorization or tenancy boundary. AshSql.Aggregate.differentqueries?/2 reports...

EEF-CVE-2026-81316 Same-named aggregates with differing filters are conflated in AshSql

Summary Incorrect Authorization vulnerability in ash-project ashsql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclosing counts, sums, or lists across an authorization or tenancy boundary. AshSql.Aggregate.differentqueries?/2...

CVE-2026-81316

CVE-2026-81316 is an Incorrect Authorization flaw in ash-project ash_sql (versions 0.1.0 through before 0.7.1). The root cause lies in AshSql.Aggregate.different_queries?/2, which treats two aggregates as identical unless both their filter and sort differ. Since aggregate queries rarely carry a s...

CVE-2026-81316 Same-named aggregates with differing filters are conflated in AshSql

Incorrect Authorization vulnerability in ash-project ashsql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclosing counts, sums, or lists across an authorization or tenancy boundary. AshSql.Aggregate.differentqueries?/2 reports...