The vulnerability is an Improper Protection of Alternate Path that lets a Lua script read any attribute of an Ash resource, including private fields that should be hidden by the manifest’s allow‑list. The read operation aggregates directly from the script’s input and only applies String.to_existing_atom and Ash.Query.Aggregate.new! without consulting the allow‑list, enabling access to sensitive attributes such as hashed_password. This flaw corresponds to CWE‑424 and allows an attacker to obtain private data that was not intended to be exposed.

Ash Project ash_lua, versions 0.1.0 through 0.2.0 inclusive, i.e., all releases before 0.2.1. The manifest allow‑list enforcement is broken in these versions, making the vulnerability present for all affected builds.

The CVSS score of 8.2 reflects a high severity scenario where an attacker who can supply or influence a Lua script can read any field the actor is authorized to view, turning the system into a data oracle for private columns. EPSS is not available, and the vulnerability is not in KEV, so the exploitation probability is unknown but realistic due to the simple vector of script submission. Based on the description, the attack vector is inferred to be remote, allowing a malicious user to inject a Lua script and trigger the return of sensitive data without further privileges beyond script execution.