AshGraphql Subscription.Batcher fails to enforce authorization checks on all notifications in a batch, allowing an attacker who can subscribe to expose data they are not authorized to see. The first notification in each batch is correctly filtered, but any subsequent notifications bypass the filter and are returned to the client, potentially leaking sensitive information.

The vulnerability affects the AshGraphql component of the ash-project community server. Versions from 1.4.0 up through but excluding 1.11.0 are impacted; upgrading to 1.11.0 or later removes the flaw.

The CVSS score of 2.3 indicates low severity. No EPSS data is available, and the issue is not listed in the CISA KEV catalog, suggesting a low probability of widespread exploitation. However, the vulnerability requires that two qualifying notifications be added to a batch within the default one‑second interval, which is likely to occur in normal operation for subscribed users. Attackers who can authenticate or hijack a subscription channel may retrieve unauthorized records, but the impact is limited to data disclosure rather than privilege escalation or code execution.