CVE-2026-1774: Casl Ability

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability.

Affected products

• Casl Ability Casl Ability: from 2.4.0, up to and including 6.7.4

Published 2026-02-10. Last modified 2026-06-17.