THREAT OPS › Threat News › [NVD] CVE-2026-77846 — Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sqlite allows an attacker who controls a get_path/2 segment to traverse into nested JSON the application never exposed, disclosing private or sensitive? embedded fields.
AshSqlite.Sq
[NVD] CVE-2026-77846 — Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sqlite allows an attacker who controls a get_path/2 segment to traverse into nested JSON the application never exposed, disclosing private or sensitive? embedded fields. AshSqlite.Sq
CVE-2026-77846 CVSS: None Published: 2026-08-30T03:16:32.530
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sqlite allows an attacker who controls a get_path/2 segment to traverse into nested JSON the application never exposed, disclosing private or sensitive? embedded fields.
AshSqlite.SqlImplementation builds the SQLite json_extract path with
Indicators of compromise
- CVE-2026-77846cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-77846