Security Advisory
CVE-2025-48044
N/A
UNKNOWN
Vulnerability Description
Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/policy.ex and program routines 'Elixir.Ash.Policy.Policy':expression/2.
This issue affects ash: from 3.6.3 before 3.7.1.
Published Date
October 17, 2025
Official Source
NIST NVD Advisory