1 matches found
EEF-CVE-2026-82724 Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain
Summary Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to...
7.6CVSS5.7AI score0.00246EPSS
SaveExploits0References4
20