CVE-2026-77956

Name of the Vulnerable Software and Affected Versions ash ai versions 0.1.0 through 0.9.x

Description An improper control of code generation allows a remote, unauthenticated client to execute arbitrary Elixir code. The AshAi.Actions.Prompt function evaluates prompt content using EEx.eval string/2. When a prompt action incorporates request data via the fn input, context -> ... end form, attacker-controlled text is compiled and executed as an EEx template (Elixir source) on the server before a model request is initiated.

Recommendations Update ash ai to version 1.0.0 or later.