EEF-CVE-2026-115635 AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

Summary Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulkcreate/4 or a single create runs as an upsert with returnskippedupsert?: true and the upsert is skipped for example because its...

CVE-2026-115635

An Incorrect Authorization vulnerability exists in ash_postgres (versions 2.6.22 before 2.15.2 ). When performing an upsert with return_skipped_upsert?: true and the operation is skipped (e.g., because the upsert_condition is not met), the AshPostgres.DataLayer retrieves the existing row based on...

CVE-2026-115635 AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

Incorrect Authorization vulnerability in ash-project ashpostgres allows a user to read another tenant's record through a skipped upsert. When Ash.bulkcreate/4 or a single create runs as an upsert with returnskippedupsert?: true and the upsert is skipped for example because its upsertcondition doe...