CVE-2026-82579

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-82579
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82579.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-82579
Aliases
Published
2026-08-31T01:07:49Z
Modified
2026-09-03T03:31:06Z
Severity
  • 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service
Details

Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can influence a model's output to hang the tool loop and drive unbounded, repeated model requests.

AshAi.ToolLoop classifies a model response of :tool_calls, then filters the calls through normalize_tool_calls/2 and unprocessed_tool_calls/2. Both can empty the list: a call missing a valid name, or one reusing a tool_call_id that already has a result in history, is dropped. With an empty list the loop appended nothing and recursed with a byte-identical message list, so the conversation never advanced and the same request was re-sent every iteration. Under the supported max_iterations: :infinity this never terminated; otherwise it exhausted the full budget. Prompt-injected content can make the model re-emit a spent tool_call_id. The fix treats an empty post-filter list as terminal.

This issue affects ash_ai: from 0.6.0 before 1.0.0.

Database specific 
{
    "cna_assigner":  "EEF",
    "cwe_ids":  [
        "CWE-835"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82579.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "bc2122f78fca6c11d8ec2b9ac53148ec17476460"
                },
                {
                    "fixed":  "53325fdab90afab628c6a53232ef2a9001580bd9"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/ash-project/ash_ai

Affected ranges

Type
GIT
Repo
https://github.com/ash-project/ash_ai
Events
Introduced
c31e6f4b619d9e6f79088fdf4f2a3463941137a6
Fixed
f72b14744996e71df6d73480d617d963f340597b
Fixed
53325fdab90afab628c6a53232ef2a9001580bd9
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0.6.0"
        },
        {
            "fixed":  "1.0.0"
        }
    ],
    "source":  [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

v0.*
v0.6.0
v0.6.1
v0.7.0
v0.7.1
v0.7.2
v0.7.3
v0.8.0
v0.8.1
v0.8.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82579.json"