The vulnerability identified as CVE-2026-77177 affects the Open GenAI Stack (ogx-ai) version dated 2026-06-11. It arises because prompt injection attacks can exploit Jinja2 template syntax to perform server-side expression evaluation without adequate input sanitization. This flaw enables an attacker to execute arbitrary code on the server hosting the AI backend, including Meta AI services for WhatsApp and other products. No CVSS score is provided, and no known exploits in the wild have been reported. There is no information about patches or fixes available at this time.

Successful exploitation of this vulnerability can lead to arbitrary code execution on the server, potentially compromising the confidentiality, integrity, and availability of the affected AI backend systems. This could allow attackers to manipulate AI responses, access sensitive data, or disrupt service operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to apply input sanitization controls to prevent injection of Jinja2 template syntax in prompts and to monitor for suspicious activity related to prompt inputs.