CVE-2026-107716

Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index.json or discovered and existing .jinja prompt files. In an application where untrusted users can influence a prompt directory, DirectoryPromptRegistry._scan() and DirectoryPromptRegistry.get() can follow a link outside the registry root and disclose a file, while DirectoryPromptRegistry.set(), DirectoryPromptRegistry._save(), and DirectoryPromptRegistry._load() can read or overwrite an external link target. The issue requires attacker influence over the registry directory or its extracted contents. This issue is fixed in version 2.5.1.

• CWE-22
• CWE-59

• https://github.com/masci/banks/commit/23ed13e50b4e217693fa5f9c30943fac8a41582f
• https://github.com/masci/banks/pull/79
• https://github.com/masci/banks/releases/tag/v2.5.1
• https://github.com/masci/banks/security/advisories/GHSA-556j-vv39-8rqv

Published

Oct 8, 2026

Last Modified

Oct 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-107707Intego Antivirus for Windows through 3.0.0.1 contains a link…7.8
• CVE-2026-107708MIT krb5 through 1.22.2 contains a NULL pointer dereference …4.9
• CVE-2026-107709A path traversal vulnerability exists in Bower decompress-zi…7.8
• CVE-2026-10771A vulnerability was found in crmeb crmeb_java 1.4. Affected …7.3
• CVE-2026-107714The Mechanize library is used for automating interaction wit…5.9
• CVE-2026-107715The Mechanize library is used for automating interaction wit…6.8
• CVE-2026-107717Banks generates meaningful LLM prompts using a simple templa…6.5
• CVE-2026-107718AdonisJS HTTP Server is a package for handling HTTP requests…6.1
• CVE-2026-107719fast-jwt provides fast JSON Web Token (JWT) implementation. …4.2
• CVE-2026-10772Rejected reason: ** DUPLICATE ** This CVE Record has been re…
• CVE-2026-107720fast-jwt provides fast JSON Web Token (JWT) implementation. …7.4
• CVE-2026-107721fast-jwt provides fast JSON Web Token (JWT) implementation. …5.9