CVE-2026-77956 | ash-project ash_ai up to 0.9.x Prompt EEx.eval_string code injection

August 31, 2026 Yanac

A vulnerability marked as critical has been reported in ash-project ash_ai up to 0.9.x. The affected element is the function EEx.eval_string of the component Prompt. The manipulation leads to code injection.

This vulnerability is referenced as CVE-2026-77956. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More