CVE-2025-48042

No fix known EPSS <1%CVSS 7.1

Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ash: from 0.1.1 before 3.5.39.

Published 2025-09-07 · CVE record · OSV

Products: ash-project ash