CVE-2026-77956: ash_ai compiles prompt text as Elixir through EEx, giving unauthenticated remote code execution at 8.9

NVD·high signalXBlueskyLinkedInCopy link

`AshAi.Actions.Prompt` evaluates prompt content through `EEx.eval_string/2`, and the documented `prompt: fn input, context -> ... end` form lets prompt text be built from action arguments. Any prompt action whose text incorporates request data therefore compiles and runs attacker-controlled text as Elixir source, reachable by a remote unauthenticated client. This is a distinct and more severe issue than the ash_ai DNS-rebinding origin bug (CVE-2026-81315) disclosed in the same window.