CVE-2026-82579: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop') in ash-project ash_ai

The vulnerability arises in the AshAi.ToolLoop component, which classifies model responses and filters tool calls. If the filtered list of tool calls is empty—due to missing valid names or reuse of tool_call_id already present in history—the loop appends nothing and recurses with the same message list. This causes an infinite loop under the max_iterations setting of :infinity or exhausts the iteration budget otherwise. Prompt injection can cause the model to re-emit spent tool_call_ids, triggering this condition. The fix involves treating an empty post-filter list as a terminal condition to break the loop.

An attacker who can influence the model's output can cause the ash_ai tool to hang by triggering an infinite loop, resulting in unbounded repeated requests. This can degrade availability and potentially lead to denial of service conditions for the tool. No direct code execution or data breach impact is described.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should monitor for unusual looping behavior and avoid configurations that allow unbounded max_iterations. Mitigation should focus on preventing prompt injection that causes reuse of spent tool_call_ids.