CVE-2026-82580: Ash-Project Ash Ai

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal error text to chat users. In AshAi.ToolLoop and AshAi.Tools, an exception raised while executing a tool was serialized verbatim with Exception.message/1 into the tool-result content. That content is appended to the conversation, emitted as a {:tool_result, ...} stream event, and sent back to the model, which typically relays it to the user. No filtering happened first, so anything raised inside a tool callback or lifecycle hook (database constraint messages, adapter errors, query fragments, policy or validation internals) was echoed as-is. A chat user who can steer tool arguments into a raising code path receives the raw internal text. The fix routes raised tool errors through the same safe formatter used for other tool errors. This issue affects ash_ai: from 0.6.0 before 1.0.0.

Affected products

• Ash-Project Ash Ai: from 0.6.0, before 1.0.0 (fixed in 1.0.0)

Published 2026-08-31. Last modified 2026-09-01.