CVE-2025-48044

CVE-2025-48044CVE-2025-48044

Description

Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/policy.ex and program routines 'Elixir.Ash.Policy.Policy':expression/2. This issue affects ash: from 3.6.3 before 3.7.1.

Scoring

Last modified2026-07-24
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.