CVE-2026-82579

Name of the Vulnerable Software and Affected Versions ash ai versions 0.6.0 through 0.9.x

Description An infinite loop issue exists in the AshAi.ToolLoop component. When a model response of :tool calls is processed, it is filtered through the normalize tool calls/2 and unprocessed tool calls/2 functions. If these functions return an empty list—which can occur if a call lacks a valid name or reuses a tool call id already present in the history—the loop recurses with an identical message list. This prevents the conversation from advancing and causes the same request to be sent repeatedly. If max iterations is set to :infinity, the process never terminates; otherwise, it consumes the entire iteration budget. This behavior can be triggered by prompt-injected content that forces the model to re-emit a previously used tool call id.

Recommendations Update ash ai to version 1.0.0 or later.