CVE-2025-48043 | ash up to 3.6.1 authorizer.ex Elixir.Ash.Policy.Authorizer authorization (GHSA-7r7f-9xpj-jmr7)

A vulnerability was found in ash up to 3.6.1. It has been classified as critical. This issue affects the function Elixir.Ash.Policy.Authorizer in the library lib/ash/policy/authorizer/authorizer.ex. Performing manipulation results in incorrect authorization.

This vulnerability is cataloged as CVE-2025-48043. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.