CVE-2026-82579

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-82579
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82579.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-82579
Aliases
Published
2026-08-31T01:07:49.185Z
Modified
2026-09-01T03:46:31.513655371Z
Severity
  • 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service
Details

Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can influence a model's output to hang the tool loop and drive unbounded, repeated model requests.

AshAi.ToolLoop classifies a model response of :toolcalls, then filters the calls through normalizetoolcalls/2 and unprocessedtoolcalls/2. Both can empty the list: a call missing a valid name, or one reusing a toolcallid that already has a result in history, is dropped. With an empty list the loop appended nothing and recursed with a byte-identical message list, so the conversation never advanced and the same request was re-sent every iteration. Under the supported maxiterations: :infinity this never terminated; otherwise it exhausted the full budget. Prompt-injected content can make the model re-emit a spent toolcallid. The fix treats an empty post-filter list as terminal.

This issue affects ash_ai: from 0.6.0 before 1.0.0.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82579.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "bc2122f78fca6c11d8ec2b9ac53148ec17476460"
                },
                {
                    "fixed": "53325fdab90afab628c6a53232ef2a9001580bd9"
                }
            ]
        }
    ],
    "cna_assigner": "EEF",
    "cwe_ids": [
        "CWE-835"
    ]
}
References

Affected packages

Git / github.com/ash-project/ash_ai

Affected ranges

Type
GIT
Repo
https://github.com/ash-project/ash_ai
Events
Introduced
c31e6f4b619d9e6f79088fdf4f2a3463941137a6
Fixed
f72b14744996e71df6d73480d617d963f340597b
Fixed
53325fdab90afab628c6a53232ef2a9001580bd9
Database specific
Show details 
{
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0.6.0"
        },
        {
            "fixed": "1.0.0"
        }
    ]
}

Affected versions

v0.*
v0.6.0
v0.6.1
v0.7.0
v0.7.1
v0.7.2
v0.7.3
v0.8.0
v0.8.1
v0.8.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82579.json"