Search
Find a vulnerability
Search criteria
4 vulnerabilities found for ash_cloak by ash-project
CVE-2026-81322 (GCVE-0-2026-81322)
Vulnerability from nvd – Published: 2026-08-30 18:06 – Updated: 2026-09-01 12:34
VLAI
EPSS
VEX
Title
Cloaked plaintext leaks through a non-sensitive action argument in AshCloak
Summary
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the library encrypts.
AshCloak.Transformers.SetUpEncryption removes each cloaked attribute from the action's accept list and adds an action argument that carries the plaintext into the encryption change. That argument is built with sensitive?: attr.sensitive?, inheriting the flag from the source attribute, so a cloaked attribute declared without sensitive? true produces a non-sensitive argument. It is the only place the cleartext value lives, and the one place Ash will not redact: it appears verbatim in inspect(changeset), Ash.Error.Invalid and validation error messages, telemetry, :sys dumps, and error-tracker payloads. The generated encrypted attribute and decrypt calculation are already hardcoded sensitive.
This issue affects ash_cloak: from 0.1.0 before 0.4.0.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-01 12:33 UTC
CWE
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/ash-project/ash_cloak/security… | vendor-advisoryrelated |
| https://cna.erlef.org/cves/CVE-2026-81322.html | related |
| https://osv.dev/vulnerability/EEF-CVE-2026-81322 | related |
| https://github.com/ash-project/ash_cloak/commit/e… | patch |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| ash-project | ash_cloak |
Affected:
0.1.0 , < 0.4.0
(semver)
cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:* |
|
| ash-project | ash_cloak |
Affected:
f1595a77fdfa9bfc672f84c2f77feb9e7bf895fc , < ef49cfc832329fc8bc70ec6542a4dfff5dafd076
(git)
cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-81322",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-01T12:33:07.020968Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-01T12:34:57.167Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/ash-project/ash_cloak/security/advisories/GHSA-qp4v-vvrg-8ggx"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://repo.hex.pm",
"cpes": [
"cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"modules": [
"\u0027Elixir.AshCloak.Transformers.SetUpEncryption\u0027"
],
"packageName": "ash_cloak",
"packageURL": "pkg:hex/ash_cloak",
"product": "ash_cloak",
"programFiles": [
"lib/ash_cloak/transformers/set_up_encryption.ex"
],
"programRoutines": [
{
"name": "\u0027Elixir.AshCloak.Transformers.SetUpEncryption\u0027:rewrite_actions/2"
}
],
"repo": "https://github.com/ash-project/ash_cloak",
"vendor": "ash-project",
"versions": [
{
"lessThan": "0.4.0",
"status": "affected",
"version": "0.1.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://github.com",
"cpes": [
"cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"modules": [
"\u0027Elixir.AshCloak.Transformers.SetUpEncryption\u0027"
],
"packageName": "ash-project/ash_cloak",
"packageURL": "pkg:github/ash-project/ash_cloak",
"product": "ash_cloak",
"programFiles": [
"lib/ash_cloak/transformers/set_up_encryption.ex"
],
"programRoutines": [
{
"name": "\u0027Elixir.AshCloak.Transformers.SetUpEncryption\u0027:rewrite_actions/2"
}
],
"repo": "https://github.com/ash-project/ash_cloak",
"vendor": "ash-project",
"versions": [
{
"lessThan": "ef49cfc832329fc8bc70ec6542a4dfff5dafd076",
"status": "affected",
"version": "f1595a77fdfa9bfc672f84c2f77feb9e7bf895fc",
"versionType": "git"
}
]
}
],
"configurations": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA resource must cloak an attribute that is not itself declared \u003ccode\u003esensitive? true\u003c/code\u003e, and the plaintext must reach an output that renders it (a create/update validation error returned to the client, or logs, telemetry, or crash reports that capture the changeset or error).\u003c/p\u003e"
},
{
"base64": false,
"type": "text/markdown",
"value": "A resource must cloak an attribute that is not itself declared `sensitive? true`, and the plaintext must reach an output that renders it (a create/update validation error returned to the client, or logs, telemetry, or crash reports that capture the changeset or error)."
}
],
"value": "A resource must cloak an attribute that is not itself declared sensitive? true, and the plaintext must reach an output that renders it (a create/update validation error returned to the client, or logs, telemetry, or crash reports that capture the changeset or error)."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*",
"versionEndExcluding": "0.4.0",
"versionStartIncluding": "0.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Peter Ullrich"
},
{
"lang": "en",
"type": "reporter",
"value": "Peter Ullrich"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Zach Daniel / Ash Project"
},
{
"lang": "en",
"type": "coordinator",
"value": "Jonatan M\u00e4nnchen / EEF"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eExposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the library encrypts.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eAshCloak.Transformers.SetUpEncryption\u003c/code\u003e removes each cloaked attribute from the action\u0027s \u003ccode\u003eaccept\u003c/code\u003e list and adds an action argument that carries the plaintext into the encryption change. That argument is built with \u003ccode\u003esensitive?: attr.sensitive?\u003c/code\u003e, inheriting the flag from the source attribute, so a cloaked attribute declared without \u003ccode\u003esensitive? true\u003c/code\u003e produces a non-sensitive argument. It is the only place the cleartext value lives, and the one place Ash will not redact: it appears verbatim in \u003ccode\u003einspect(changeset)\u003c/code\u003e, \u003ccode\u003eAsh.Error.Invalid\u003c/code\u003e and validation error messages, telemetry, \u003ccode\u003e:sys\u003c/code\u003e dumps, and error-tracker payloads. The generated encrypted attribute and decrypt calculation are already hardcoded sensitive.\u003c/p\u003e\n\u003cp\u003eThis issue affects ash_cloak: from 0.1.0 before 0.4.0.\u003c/p\u003e"
},
{
"base64": false,
"type": "text/markdown",
"value": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the library encrypts.\n\n`AshCloak.Transformers.SetUpEncryption` removes each cloaked attribute from the action\u0027s `accept` list and adds an action argument that carries the plaintext into the encryption change. That argument is built with `sensitive?: attr.sensitive?`, inheriting the flag from the source attribute, so a cloaked attribute declared without `sensitive? true` produces a non-sensitive argument. It is the only place the cleartext value lives, and the one place Ash will not redact: it appears verbatim in `inspect(changeset)`, `Ash.Error.Invalid` and validation error messages, telemetry, `:sys` dumps, and error-tracker payloads. The generated encrypted attribute and decrypt calculation are already hardcoded sensitive.\n\nThis issue affects ash_cloak: from 0.1.0 before 0.4.0."
}
],
"value": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the library encrypts.\n\nAshCloak.Transformers.SetUpEncryption removes each cloaked attribute from the action\u0027s accept list and adds an action argument that carries the plaintext into the encryption change. That argument is built with sensitive?: attr.sensitive?, inheriting the flag from the source attribute, so a cloaked attribute declared without sensitive? true produces a non-sensitive argument. It is the only place the cleartext value lives, and the one place Ash will not redact: it appears verbatim in inspect(changeset), Ash.Error.Invalid and validation error messages, telemetry, :sys dumps, and error-tracker payloads. The generated encrypted attribute and decrypt calculation are already hardcoded sensitive.\n\nThis issue affects ash_cloak: from 0.1.0 before 0.4.0."
}
],
"impacts": [
{
"capecId": "CAPEC-37",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-37 Retrieve Embedded Sensitive Data"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 2.1,
"baseSeverity": "LOW",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-30T18:06:33.478Z",
"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
"shortName": "EEF"
},
"references": [
{
"tags": [
"vendor-advisory",
"related"
],
"url": "https://github.com/ash-project/ash_cloak/security/advisories/GHSA-qp4v-vvrg-8ggx"
},
{
"tags": [
"related"
],
"url": "https://cna.erlef.org/cves/CVE-2026-81322.html"
},
{
"tags": [
"related"
],
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-81322"
},
{
"tags": [
"patch"
],
"url": "https://github.com/ash-project/ash_cloak/commit/ef49cfc832329fc8bc70ec6542a4dfff5dafd076"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Cloaked plaintext leaks through a non-sensitive action argument in AshCloak"
}
},
"cveMetadata": {
"assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
"assignerShortName": "EEF",
"cveId": "CVE-2026-81322",
"datePublished": "2026-08-30T18:06:33.478Z",
"dateReserved": "2026-08-30T06:00:01.266Z",
"dateUpdated": "2026-09-01T12:34:57.167Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-81319 (GCVE-0-2026-81319)
Vulnerability from nvd – Published: 2026-08-30 18:05 – Updated: 2026-09-01 12:32
VLAI
EPSS
VEX
Title
Unsafe deserialization of decrypted terms enables node DoS in AshCloak
Summary
Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption.
AshCloak.Calculations.Decrypt decodes the decrypted binary with Ash.Helpers.non_executable_binary_to_term/1 without the :safe option, so atoms in the payload are interned during the decode and never garbage collected, and the term format's compressed form is inflated transparently. vault.decrypt!() is the only barrier and stops tampering only for an authenticated cipher. Cloak also ships the unauthenticated AES.CTR, whose ciphertext an attacker who knows their own plaintext can XOR into any same-length payload without the key, so an ordinary read of the forged column reaches the decoder. A few hundred kilobytes of distinct atoms exhausts the atom table, or a small compressed payload inflates to gigabytes.
This issue affects ash_cloak: from 0.1.0 before 0.4.0.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-01 12:32 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/ash-project/ash_cloak/security… | vendor-advisoryrelated |
| https://cna.erlef.org/cves/CVE-2026-81319.html | related |
| https://osv.dev/vulnerability/EEF-CVE-2026-81319 | related |
| https://github.com/ash-project/ash_cloak/commit/1… | patch |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| ash-project | ash_cloak |
Affected:
0.1.0 , < 0.4.0
(semver)
cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:* |
|
| ash-project | ash_cloak |
Affected:
f1595a77fdfa9bfc672f84c2f77feb9e7bf895fc , < 1690f0a436efe3e7c11d70d74ff5a8ac0fdf6608
(git)
cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-81319",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-01T12:32:22.534417Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-01T12:32:46.422Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/ash-project/ash_cloak/security/advisories/GHSA-rc26-mrm2-6pf9"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://repo.hex.pm",
"cpes": [
"cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"modules": [
"\u0027Elixir.AshCloak.Calculations.Decrypt\u0027"
],
"packageName": "ash_cloak",
"packageURL": "pkg:hex/ash_cloak",
"product": "ash_cloak",
"programFiles": [
"lib/ash_cloak/calculations/decrypt.ex"
],
"programRoutines": [
{
"name": "\u0027Elixir.AshCloak.Calculations.Decrypt\u0027:calculate/3"
}
],
"repo": "https://github.com/ash-project/ash_cloak",
"vendor": "ash-project",
"versions": [
{
"lessThan": "0.4.0",
"status": "affected",
"version": "0.1.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://github.com",
"cpes": [
"cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"modules": [
"\u0027Elixir.AshCloak.Calculations.Decrypt\u0027"
],
"packageName": "ash-project/ash_cloak",
"packageURL": "pkg:github/ash-project/ash_cloak",
"product": "ash_cloak",
"programFiles": [
"lib/ash_cloak/calculations/decrypt.ex"
],
"programRoutines": [
{
"name": "\u0027Elixir.AshCloak.Calculations.Decrypt\u0027:calculate/3"
}
],
"repo": "https://github.com/ash-project/ash_cloak",
"vendor": "ash-project",
"versions": [
{
"lessThan": "1690f0a436efe3e7c11d70d74ff5a8ac0fdf6608",
"status": "affected",
"version": "f1595a77fdfa9bfc672f84c2f77feb9e7bf895fc",
"versionType": "git"
}
]
}
],
"configurations": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn application must use ash_cloak with an unauthenticated vault cipher (for example the \u003ccode\u003eAES.CTR\u003c/code\u003e cipher shipped by Cloak), or run in a deployment where the stored ciphertext can be modified, and read a cloaked field so the decrypt calculation runs.\u003c/p\u003e"
},
{
"base64": false,
"type": "text/markdown",
"value": "An application must use ash_cloak with an unauthenticated vault cipher (for example the `AES.CTR` cipher shipped by Cloak), or run in a deployment where the stored ciphertext can be modified, and read a cloaked field so the decrypt calculation runs."
}
],
"value": "An application must use ash_cloak with an unauthenticated vault cipher (for example the AES.CTR cipher shipped by Cloak), or run in a deployment where the stored ciphertext can be modified, and read a cloaked field so the decrypt calculation runs."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*",
"versionEndExcluding": "0.4.0",
"versionStartIncluding": "0.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Peter Ullrich"
},
{
"lang": "en",
"type": "reporter",
"value": "Peter Ullrich"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Zach Daniel / Ash Project"
},
{
"lang": "en",
"type": "coordinator",
"value": "Jonatan M\u00e4nnchen / EEF"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eDeserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eAshCloak.Calculations.Decrypt\u003c/code\u003e decodes the decrypted binary with \u003ccode\u003eAsh.Helpers.non_executable_binary_to_term/1\u003c/code\u003e without the \u003ccode\u003e:safe\u003c/code\u003e option, so atoms in the payload are interned during the decode and never garbage collected, and the term format\u0027s compressed form is inflated transparently. \u003ccode\u003evault.decrypt!()\u003c/code\u003e is the only barrier and stops tampering only for an authenticated cipher. Cloak also ships the unauthenticated \u003ccode\u003eAES.CTR\u003c/code\u003e, whose ciphertext an attacker who knows their own plaintext can XOR into any same-length payload without the key, so an ordinary read of the forged column reaches the decoder. A few hundred kilobytes of distinct atoms exhausts the atom table, or a small compressed payload inflates to gigabytes.\u003c/p\u003e\n\u003cp\u003eThis issue affects ash_cloak: from 0.1.0 before 0.4.0.\u003c/p\u003e"
},
{
"base64": false,
"type": "text/markdown",
"value": "Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption.\n\n`AshCloak.Calculations.Decrypt` decodes the decrypted binary with `Ash.Helpers.non_executable_binary_to_term/1` without the `:safe` option, so atoms in the payload are interned during the decode and never garbage collected, and the term format\u0027s compressed form is inflated transparently. `vault.decrypt!()` is the only barrier and stops tampering only for an authenticated cipher. Cloak also ships the unauthenticated `AES.CTR`, whose ciphertext an attacker who knows their own plaintext can XOR into any same-length payload without the key, so an ordinary read of the forged column reaches the decoder. A few hundred kilobytes of distinct atoms exhausts the atom table, or a small compressed payload inflates to gigabytes.\n\nThis issue affects ash_cloak: from 0.1.0 before 0.4.0."
}
],
"value": "Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption.\n\nAshCloak.Calculations.Decrypt decodes the decrypted binary with Ash.Helpers.non_executable_binary_to_term/1 without the :safe option, so atoms in the payload are interned during the decode and never garbage collected, and the term format\u0027s compressed form is inflated transparently. vault.decrypt!() is the only barrier and stops tampering only for an authenticated cipher. Cloak also ships the unauthenticated AES.CTR, whose ciphertext an attacker who knows their own plaintext can XOR into any same-length payload without the key, so an ordinary read of the forged column reaches the decoder. A few hundred kilobytes of distinct atoms exhausts the atom table, or a small compressed payload inflates to gigabytes.\n\nThis issue affects ash_cloak: from 0.1.0 before 0.4.0."
}
],
"impacts": [
{
"capecId": "CAPEC-586",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-586 Object Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-30T18:05:13.889Z",
"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
"shortName": "EEF"
},
"references": [
{
"tags": [
"vendor-advisory",
"related"
],
"url": "https://github.com/ash-project/ash_cloak/security/advisories/GHSA-rc26-mrm2-6pf9"
},
{
"tags": [
"related"
],
"url": "https://cna.erlef.org/cves/CVE-2026-81319.html"
},
{
"tags": [
"related"
],
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-81319"
},
{
"tags": [
"patch"
],
"url": "https://github.com/ash-project/ash_cloak/commit/1690f0a436efe3e7c11d70d74ff5a8ac0fdf6608"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Unsafe deserialization of decrypted terms enables node DoS in AshCloak"
}
},
"cveMetadata": {
"assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
"assignerShortName": "EEF",
"cveId": "CVE-2026-81319",
"datePublished": "2026-08-30T18:05:13.889Z",
"dateReserved": "2026-08-30T05:45:01.821Z",
"dateUpdated": "2026-09-01T12:32:46.422Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-81322 (GCVE-0-2026-81322)
Vulnerability from cvelistv5 – Published: 2026-08-30 18:06 – Updated: 2026-09-01 12:34
VLAI
EPSS
VEX
Title
Cloaked plaintext leaks through a non-sensitive action argument in AshCloak
Summary
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the library encrypts.
AshCloak.Transformers.SetUpEncryption removes each cloaked attribute from the action's accept list and adds an action argument that carries the plaintext into the encryption change. That argument is built with sensitive?: attr.sensitive?, inheriting the flag from the source attribute, so a cloaked attribute declared without sensitive? true produces a non-sensitive argument. It is the only place the cleartext value lives, and the one place Ash will not redact: it appears verbatim in inspect(changeset), Ash.Error.Invalid and validation error messages, telemetry, :sys dumps, and error-tracker payloads. The generated encrypted attribute and decrypt calculation are already hardcoded sensitive.
This issue affects ash_cloak: from 0.1.0 before 0.4.0.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-01 12:33 UTC
CWE
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/ash-project/ash_cloak/security… | vendor-advisoryrelated |
| https://cna.erlef.org/cves/CVE-2026-81322.html | related |
| https://osv.dev/vulnerability/EEF-CVE-2026-81322 | related |
| https://github.com/ash-project/ash_cloak/commit/e… | patch |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| ash-project | ash_cloak |
Affected:
0.1.0 , < 0.4.0
(semver)
cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:* |
|
| ash-project | ash_cloak |
Affected:
f1595a77fdfa9bfc672f84c2f77feb9e7bf895fc , < ef49cfc832329fc8bc70ec6542a4dfff5dafd076
(git)
cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-81322",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-01T12:33:07.020968Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-01T12:34:57.167Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/ash-project/ash_cloak/security/advisories/GHSA-qp4v-vvrg-8ggx"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://repo.hex.pm",
"cpes": [
"cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"modules": [
"\u0027Elixir.AshCloak.Transformers.SetUpEncryption\u0027"
],
"packageName": "ash_cloak",
"packageURL": "pkg:hex/ash_cloak",
"product": "ash_cloak",
"programFiles": [
"lib/ash_cloak/transformers/set_up_encryption.ex"
],
"programRoutines": [
{
"name": "\u0027Elixir.AshCloak.Transformers.SetUpEncryption\u0027:rewrite_actions/2"
}
],
"repo": "https://github.com/ash-project/ash_cloak",
"vendor": "ash-project",
"versions": [
{
"lessThan": "0.4.0",
"status": "affected",
"version": "0.1.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://github.com",
"cpes": [
"cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"modules": [
"\u0027Elixir.AshCloak.Transformers.SetUpEncryption\u0027"
],
"packageName": "ash-project/ash_cloak",
"packageURL": "pkg:github/ash-project/ash_cloak",
"product": "ash_cloak",
"programFiles": [
"lib/ash_cloak/transformers/set_up_encryption.ex"
],
"programRoutines": [
{
"name": "\u0027Elixir.AshCloak.Transformers.SetUpEncryption\u0027:rewrite_actions/2"
}
],
"repo": "https://github.com/ash-project/ash_cloak",
"vendor": "ash-project",
"versions": [
{
"lessThan": "ef49cfc832329fc8bc70ec6542a4dfff5dafd076",
"status": "affected",
"version": "f1595a77fdfa9bfc672f84c2f77feb9e7bf895fc",
"versionType": "git"
}
]
}
],
"configurations": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA resource must cloak an attribute that is not itself declared \u003ccode\u003esensitive? true\u003c/code\u003e, and the plaintext must reach an output that renders it (a create/update validation error returned to the client, or logs, telemetry, or crash reports that capture the changeset or error).\u003c/p\u003e"
},
{
"base64": false,
"type": "text/markdown",
"value": "A resource must cloak an attribute that is not itself declared `sensitive? true`, and the plaintext must reach an output that renders it (a create/update validation error returned to the client, or logs, telemetry, or crash reports that capture the changeset or error)."
}
],
"value": "A resource must cloak an attribute that is not itself declared sensitive? true, and the plaintext must reach an output that renders it (a create/update validation error returned to the client, or logs, telemetry, or crash reports that capture the changeset or error)."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*",
"versionEndExcluding": "0.4.0",
"versionStartIncluding": "0.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Peter Ullrich"
},
{
"lang": "en",
"type": "reporter",
"value": "Peter Ullrich"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Zach Daniel / Ash Project"
},
{
"lang": "en",
"type": "coordinator",
"value": "Jonatan M\u00e4nnchen / EEF"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eExposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the library encrypts.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eAshCloak.Transformers.SetUpEncryption\u003c/code\u003e removes each cloaked attribute from the action\u0027s \u003ccode\u003eaccept\u003c/code\u003e list and adds an action argument that carries the plaintext into the encryption change. That argument is built with \u003ccode\u003esensitive?: attr.sensitive?\u003c/code\u003e, inheriting the flag from the source attribute, so a cloaked attribute declared without \u003ccode\u003esensitive? true\u003c/code\u003e produces a non-sensitive argument. It is the only place the cleartext value lives, and the one place Ash will not redact: it appears verbatim in \u003ccode\u003einspect(changeset)\u003c/code\u003e, \u003ccode\u003eAsh.Error.Invalid\u003c/code\u003e and validation error messages, telemetry, \u003ccode\u003e:sys\u003c/code\u003e dumps, and error-tracker payloads. The generated encrypted attribute and decrypt calculation are already hardcoded sensitive.\u003c/p\u003e\n\u003cp\u003eThis issue affects ash_cloak: from 0.1.0 before 0.4.0.\u003c/p\u003e"
},
{
"base64": false,
"type": "text/markdown",
"value": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the library encrypts.\n\n`AshCloak.Transformers.SetUpEncryption` removes each cloaked attribute from the action\u0027s `accept` list and adds an action argument that carries the plaintext into the encryption change. That argument is built with `sensitive?: attr.sensitive?`, inheriting the flag from the source attribute, so a cloaked attribute declared without `sensitive? true` produces a non-sensitive argument. It is the only place the cleartext value lives, and the one place Ash will not redact: it appears verbatim in `inspect(changeset)`, `Ash.Error.Invalid` and validation error messages, telemetry, `:sys` dumps, and error-tracker payloads. The generated encrypted attribute and decrypt calculation are already hardcoded sensitive.\n\nThis issue affects ash_cloak: from 0.1.0 before 0.4.0."
}
],
"value": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the library encrypts.\n\nAshCloak.Transformers.SetUpEncryption removes each cloaked attribute from the action\u0027s accept list and adds an action argument that carries the plaintext into the encryption change. That argument is built with sensitive?: attr.sensitive?, inheriting the flag from the source attribute, so a cloaked attribute declared without sensitive? true produces a non-sensitive argument. It is the only place the cleartext value lives, and the one place Ash will not redact: it appears verbatim in inspect(changeset), Ash.Error.Invalid and validation error messages, telemetry, :sys dumps, and error-tracker payloads. The generated encrypted attribute and decrypt calculation are already hardcoded sensitive.\n\nThis issue affects ash_cloak: from 0.1.0 before 0.4.0."
}
],
"impacts": [
{
"capecId": "CAPEC-37",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-37 Retrieve Embedded Sensitive Data"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 2.1,
"baseSeverity": "LOW",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-30T18:06:33.478Z",
"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
"shortName": "EEF"
},
"references": [
{
"tags": [
"vendor-advisory",
"related"
],
"url": "https://github.com/ash-project/ash_cloak/security/advisories/GHSA-qp4v-vvrg-8ggx"
},
{
"tags": [
"related"
],
"url": "https://cna.erlef.org/cves/CVE-2026-81322.html"
},
{
"tags": [
"related"
],
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-81322"
},
{
"tags": [
"patch"
],
"url": "https://github.com/ash-project/ash_cloak/commit/ef49cfc832329fc8bc70ec6542a4dfff5dafd076"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Cloaked plaintext leaks through a non-sensitive action argument in AshCloak"
}
},
"cveMetadata": {
"assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
"assignerShortName": "EEF",
"cveId": "CVE-2026-81322",
"datePublished": "2026-08-30T18:06:33.478Z",
"dateReserved": "2026-08-30T06:00:01.266Z",
"dateUpdated": "2026-09-01T12:34:57.167Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-81319 (GCVE-0-2026-81319)
Vulnerability from cvelistv5 – Published: 2026-08-30 18:05 – Updated: 2026-09-01 12:32
VLAI
EPSS
VEX
Title
Unsafe deserialization of decrypted terms enables node DoS in AshCloak
Summary
Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption.
AshCloak.Calculations.Decrypt decodes the decrypted binary with Ash.Helpers.non_executable_binary_to_term/1 without the :safe option, so atoms in the payload are interned during the decode and never garbage collected, and the term format's compressed form is inflated transparently. vault.decrypt!() is the only barrier and stops tampering only for an authenticated cipher. Cloak also ships the unauthenticated AES.CTR, whose ciphertext an attacker who knows their own plaintext can XOR into any same-length payload without the key, so an ordinary read of the forged column reaches the decoder. A few hundred kilobytes of distinct atoms exhausts the atom table, or a small compressed payload inflates to gigabytes.
This issue affects ash_cloak: from 0.1.0 before 0.4.0.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-01 12:32 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/ash-project/ash_cloak/security… | vendor-advisoryrelated |
| https://cna.erlef.org/cves/CVE-2026-81319.html | related |
| https://osv.dev/vulnerability/EEF-CVE-2026-81319 | related |
| https://github.com/ash-project/ash_cloak/commit/1… | patch |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| ash-project | ash_cloak |
Affected:
0.1.0 , < 0.4.0
(semver)
cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:* |
|
| ash-project | ash_cloak |
Affected:
f1595a77fdfa9bfc672f84c2f77feb9e7bf895fc , < 1690f0a436efe3e7c11d70d74ff5a8ac0fdf6608
(git)
cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-81319",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-01T12:32:22.534417Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-01T12:32:46.422Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/ash-project/ash_cloak/security/advisories/GHSA-rc26-mrm2-6pf9"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://repo.hex.pm",
"cpes": [
"cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"modules": [
"\u0027Elixir.AshCloak.Calculations.Decrypt\u0027"
],
"packageName": "ash_cloak",
"packageURL": "pkg:hex/ash_cloak",
"product": "ash_cloak",
"programFiles": [
"lib/ash_cloak/calculations/decrypt.ex"
],
"programRoutines": [
{
"name": "\u0027Elixir.AshCloak.Calculations.Decrypt\u0027:calculate/3"
}
],
"repo": "https://github.com/ash-project/ash_cloak",
"vendor": "ash-project",
"versions": [
{
"lessThan": "0.4.0",
"status": "affected",
"version": "0.1.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://github.com",
"cpes": [
"cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"modules": [
"\u0027Elixir.AshCloak.Calculations.Decrypt\u0027"
],
"packageName": "ash-project/ash_cloak",
"packageURL": "pkg:github/ash-project/ash_cloak",
"product": "ash_cloak",
"programFiles": [
"lib/ash_cloak/calculations/decrypt.ex"
],
"programRoutines": [
{
"name": "\u0027Elixir.AshCloak.Calculations.Decrypt\u0027:calculate/3"
}
],
"repo": "https://github.com/ash-project/ash_cloak",
"vendor": "ash-project",
"versions": [
{
"lessThan": "1690f0a436efe3e7c11d70d74ff5a8ac0fdf6608",
"status": "affected",
"version": "f1595a77fdfa9bfc672f84c2f77feb9e7bf895fc",
"versionType": "git"
}
]
}
],
"configurations": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn application must use ash_cloak with an unauthenticated vault cipher (for example the \u003ccode\u003eAES.CTR\u003c/code\u003e cipher shipped by Cloak), or run in a deployment where the stored ciphertext can be modified, and read a cloaked field so the decrypt calculation runs.\u003c/p\u003e"
},
{
"base64": false,
"type": "text/markdown",
"value": "An application must use ash_cloak with an unauthenticated vault cipher (for example the `AES.CTR` cipher shipped by Cloak), or run in a deployment where the stored ciphertext can be modified, and read a cloaked field so the decrypt calculation runs."
}
],
"value": "An application must use ash_cloak with an unauthenticated vault cipher (for example the AES.CTR cipher shipped by Cloak), or run in a deployment where the stored ciphertext can be modified, and read a cloaked field so the decrypt calculation runs."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ash-project:ash_cloak:*:*:*:*:*:*:*:*",
"versionEndExcluding": "0.4.0",
"versionStartIncluding": "0.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Peter Ullrich"
},
{
"lang": "en",
"type": "reporter",
"value": "Peter Ullrich"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Zach Daniel / Ash Project"
},
{
"lang": "en",
"type": "coordinator",
"value": "Jonatan M\u00e4nnchen / EEF"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eDeserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption.\u003c/p\u003e\n\u003cp\u003e\u003ccode\u003eAshCloak.Calculations.Decrypt\u003c/code\u003e decodes the decrypted binary with \u003ccode\u003eAsh.Helpers.non_executable_binary_to_term/1\u003c/code\u003e without the \u003ccode\u003e:safe\u003c/code\u003e option, so atoms in the payload are interned during the decode and never garbage collected, and the term format\u0027s compressed form is inflated transparently. \u003ccode\u003evault.decrypt!()\u003c/code\u003e is the only barrier and stops tampering only for an authenticated cipher. Cloak also ships the unauthenticated \u003ccode\u003eAES.CTR\u003c/code\u003e, whose ciphertext an attacker who knows their own plaintext can XOR into any same-length payload without the key, so an ordinary read of the forged column reaches the decoder. A few hundred kilobytes of distinct atoms exhausts the atom table, or a small compressed payload inflates to gigabytes.\u003c/p\u003e\n\u003cp\u003eThis issue affects ash_cloak: from 0.1.0 before 0.4.0.\u003c/p\u003e"
},
{
"base64": false,
"type": "text/markdown",
"value": "Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption.\n\n`AshCloak.Calculations.Decrypt` decodes the decrypted binary with `Ash.Helpers.non_executable_binary_to_term/1` without the `:safe` option, so atoms in the payload are interned during the decode and never garbage collected, and the term format\u0027s compressed form is inflated transparently. `vault.decrypt!()` is the only barrier and stops tampering only for an authenticated cipher. Cloak also ships the unauthenticated `AES.CTR`, whose ciphertext an attacker who knows their own plaintext can XOR into any same-length payload without the key, so an ordinary read of the forged column reaches the decoder. A few hundred kilobytes of distinct atoms exhausts the atom table, or a small compressed payload inflates to gigabytes.\n\nThis issue affects ash_cloak: from 0.1.0 before 0.4.0."
}
],
"value": "Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption.\n\nAshCloak.Calculations.Decrypt decodes the decrypted binary with Ash.Helpers.non_executable_binary_to_term/1 without the :safe option, so atoms in the payload are interned during the decode and never garbage collected, and the term format\u0027s compressed form is inflated transparently. vault.decrypt!() is the only barrier and stops tampering only for an authenticated cipher. Cloak also ships the unauthenticated AES.CTR, whose ciphertext an attacker who knows their own plaintext can XOR into any same-length payload without the key, so an ordinary read of the forged column reaches the decoder. A few hundred kilobytes of distinct atoms exhausts the atom table, or a small compressed payload inflates to gigabytes.\n\nThis issue affects ash_cloak: from 0.1.0 before 0.4.0."
}
],
"impacts": [
{
"capecId": "CAPEC-586",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-586 Object Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-30T18:05:13.889Z",
"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
"shortName": "EEF"
},
"references": [
{
"tags": [
"vendor-advisory",
"related"
],
"url": "https://github.com/ash-project/ash_cloak/security/advisories/GHSA-rc26-mrm2-6pf9"
},
{
"tags": [
"related"
],
"url": "https://cna.erlef.org/cves/CVE-2026-81319.html"
},
{
"tags": [
"related"
],
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-81319"
},
{
"tags": [
"patch"
],
"url": "https://github.com/ash-project/ash_cloak/commit/1690f0a436efe3e7c11d70d74ff5a8ac0fdf6608"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Unsafe deserialization of decrypted terms enables node DoS in AshCloak"
}
},
"cveMetadata": {
"assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
"assignerShortName": "EEF",
"cveId": "CVE-2026-81319",
"datePublished": "2026-08-30T18:05:13.889Z",
"dateReserved": "2026-08-30T05:45:01.821Z",
"dateUpdated": "2026-09-01T12:32:46.422Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}