CVE-2026-53598 | BDVDB-2026-348981 Detail

Description#

Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that resolved paths stayed within the prompt directory or allowed roots, allowing an attacker-controlled prompt file to read local files through absolute paths, .. traversal, or symlink escapes. This issue is fixed in versions 2.0.0-beta.2.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-07-16Record published in the CVE List.
2. Version 22026-07-17Most recent update recorded in the CVE List.