Quick answers
- Is CVE-2026-82580 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-82580 being exploited in the wild.
- How severe is CVE-2026-82580?
- Informational severity, with a CVSS score of 3.7, published 31 August 2026.
- Which products and versions are affected?
- Ash-Project Ash Ai 0.6.0 to before 1.0.0.
- Is there a fix for CVE-2026-82580?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-82580 attacked?
- It is attacked over the network, in a software library.
- Am I affected by CVE-2026-82580?
- Check whether you run Ash-Project Ash Ai at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This is an information disclosure vulnerability in the AshAi.ToolLoop and AshAi.Tools modules. When a tool callback or lifecycle hook raises an exception, the exception message is serialized verbatim via Exception.message/1 into the tool-result content, appended to the conversation history, emitted as a {:tool_result, ...} stream event, and sent to the language model—which typically relays it to the end user. No filtering occurs, so sensitive details (database errors, adapter exceptions, query fragments, policy/validation internals) leak directly. A chat user who can craft tool arguments to trigger an exception receives raw internal error text. The fix applies a safe error formatter consistent with other tool error handling.
Affected products
- ash-project ash_ai 0.6.0 to before 1.0.0
Timeline
- 2026-08-31: disclosed