CVE-2026-115627

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to load destination records linked to a source record only through another tenant's join rows. When a manytomany relationship, or a through relationship, is loaded with a lateral join for example with a per-record limi...

CVE-2026-115635

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulkcreate/4 or a single create runs as an upsert with returnskippedupsert?: true and the upsert is skipped for example because its upsertcondition doe...

CVE-2026-115627

The ash_postgres component (versions 0.38.0 before 2.15.2 ) is vulnerable to an Incorrect Authorization issue (CWE-863). When loading many_to_many or through relationships using a lateral join (such as with sorting or per-record limits), the AshPostgres.DataLayer fails to execute the resource's r...

CVE-2026-115627

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to load destination records linked to a source record only through another tenant's join rows. When a manytomany relationship, or a through relationship, is loaded with a lateral join for example with a per-record limi...

CVE-2026-115627 AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to load destination records linked to a source record only through another tenant's join rows. When a manytomany relationship, or a through relationship, is loaded with a lateral join for example with a per-record limi...

CVE-2026-115627 AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to load destination records linked to a source record only through another tenant's join rows. When a manytomany relationship, or a through relationship, is loaded with a lateral join for example with a per-record limi...

EUVD-2026-109569

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to load destination records linked to a source record only through another tenant's join rows. When a manytomany relationship, or a through relationship, is loaded with a lateral join for example with a per-record limi...

CVE-2026-115627 AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to load destination records linked to a source record only through another tenant's join rows. When a manytomany relationship, or a through relationship, is loaded with a lateral join for example with a per-record limi...

EEF-CVE-2026-115627 AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

Summary Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to load destination records linked to a source record only through another tenant's join rows. When a manytomany relationship, or a through relationship, is loaded with a lateral join for example with a...

CVE-2026-115635 AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulkcreate/4 or a single create runs as an upsert with returnskippedupsert?: true and the upsert is skipped for example because its upsertcondition doe...

CVE-2026-115635

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulkcreate/4 or a single create runs as an upsert with returnskippedupsert?: true and the upsert is skipped for example because its upsertcondition doe...

CVE-2026-115635 AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulkcreate/4 or a single create runs as an upsert with returnskippedupsert?: true and the upsert is skipped for example because its upsertcondition doe...

CVE-2026-115635

An Incorrect Authorization vulnerability exists in ash_postgres (versions 2.6.22 before 2.15.2 ). When performing an upsert with return_skipped_upsert?: true and the operation is skipped (e.g., because the upsert_condition is not met), the AshPostgres.DataLayer retrieves the existing row based on...

EEF-CVE-2026-115635 AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

Summary Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulkcreate/4 or a single create runs as an upsert with returnskippedupsert?: true and the upsert is skipped for example because its...

EUVD-2026-109568

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulkcreate/4 or a single create runs as an upsert with returnskippedupsert?: true and the upsert is skipped for example because its upsertcondition doe...

CVE-2026-115635 AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulkcreate/4 or a single create runs as an upsert with returnskippedupsert?: true and the upsert is skipped for example because its upsertcondition doe...

EUVD-2026-68265

Unchecked Return Value vulnerability in ash-project ashpostgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their tenant record repointed at that other tenant's live schema, gaining access to its data...

CVE-2026-78699 rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres

Unchecked Return Value vulnerability in ash-project ashpostgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their tenant record repointed at that other tenant's live schema, gaining access to its data...

CVE-2026-78699

Unchecked Return Value vulnerability in ash-project ashpostgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their tenant record repointed at that other tenant's live schema, gaining access to its data...

CVE-2026-78699

ash_postgres (ash-project) versions 0.25.0 through 2.12.0 are affected by an unchecked return value in AshPostgres.MultiTenancy.rename_tenant/3. The function issues ALTER SCHEMA … RENAME TO … via the non-raising Ecto.Adapters.SQL.query/2, discards the result, and unconditionally returns :ok. When...