CVE-2026-80223 | ash-project ash_graphql up to 1.10.x Subscription Resolver Ash.can privileges management (EUVD-2026-68287)

A vulnerability classified as problematic was found in ash-project ash_graphql up to 1.10.x. The affected element is the function Ash.can of the component Subscription Resolver. The manipulation results in improper privilege management. This vulnerability is cataloged as CVE-2026-80223. The attack may be launched remotely. There is no exploit...