Ash.AI RCE via runtime prompt treated as EEx template (EEx.eval_string)
Security Advisory
ASH-AI-2024-001
High
Ash AI
Affected:
- ash_ai 库（使用 EEx.eval_string 处理运行时 prompt 的版本）
Fixed in:
- commit e994825 及之后的版本
Referenced CVEs:
CVE-2026-77956 · 10.0
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.