CVE-2026-81643 Missing authorization in ash graphql
Attackers can view unauthorized GraphQL subscription data because authorization checks are skipped for all but the first notification in a batch.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-81643?
CVE-2026-81643 is a low-severity missing authorization vulnerability in ash-project ash_graphql, published on 30 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Incorrect Authorization vulnerability in ash-project ash_graphql delivers GraphQL subscription payloads for records a subscriber is not authorized to see.
In AshGraphql.Subscription.Batcher, do_send/5 resolves the first notification of a batch and filters it with should_send?/1, which drops results whose errors are coded forbidden or not_found or carry no code, precisely so that unauthorized results are not disclosed. The remaining notifications in the batch are read from the process dictionary, re-run through the pipeline, and appended to the outgoing results without that filter. They reach pubsub.publish_subscription/2, and the not is_nil(record) guard drops only nil records, not error-carrying results. Any two qualifying notifications arriving within the default one-second batch interval suffice, and batching is the default path. The fix applies should_send?/1 to the whole batch.
This issue affects ash_graphql: from 1.4.0 before 1.11.0.
Weakness: CWE-863
Which versions are affected by CVE-2026-81643?
1 open source package ship an affected version, including ash_graphql.
| Package | Affected | Fixed in |
|---|---|---|
ash_graphql Hex | From 1.4.0 | 1.11.0 |
How do I fix CVE-2026-81643?
Upgrade ash_graphql to 1.11.0 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-81643 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-81643 exists.
Sources
Also known as EEF-CVE-2026-81643, GHSA-j684-hch4-q888.