CVE-2026-77177: Code Injection
Published Sep 29, 2026
·Updated
Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prompt injection (with Jinja2 template syntax) can be used to achieve server-side expression evaluation without sanitization.
Affected Software
1 affected component
Meta Open GenAI Stack (ogx-ai)
Event History
Sep 29, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are identified as affected?
The affected software is Open GenAI Stack (ogx-ai) version 2026-06-11. The issue is described in the context of its use in the Meta AI backend for WhatsApp and other products.
2
What does an attacker need to submit to exploit the issue?
An attacker needs to achieve prompt injection with Jinja2 template syntax. Unsanitized template expressions can then be evaluated on the server, leading to code execution.