CVE-2026-119613

Name of the Vulnerable Software and Affected Versions ash ai versions 1.5.0 through 1.5.0

Description An issue in ash ai allows a caller of an AshAi tool to access internal error details, such as module names and data values, by causing a tool call to fail. This occurs because AshAi.ToToolError returns the error field of Ash.Error.Unknown.UnknownError without filtering, and AshAi.Tool.Errors.format/1 transmits this text to MCP clients in AshAi.Mcp.Server and to the model in AshAi.ToolLoop. The system stores the full Exception.format/2 output or inspect/1 of a {:error, term} return in that field. Additionally, tool results that cannot be JSON-encoded trigger a Protocol.UndefinedError containing the inspected value, which may include entire records with fields not intended for return. A caller can exploit this by sending malformed tool arguments to trigger failures and read the resulting error text to discover internal module and function names.

Recommendations Update ash ai to version 1.5.1.