CVE-2026-71492

Banks generates meaningful LLM prompts using a simple template language. Prior to version 2.4.5, DirectoryPromptRegistry.set() in src/banks/registries/directory.py interpolates attacker-controlled Prompt.name and Prompt.version values into a Path without canonicalization or containment validation. Relative traversal such as ../victim/foo and an absolute Prompt.name can escape or discard the configured registry root, while overwrite=True permits replacement of existing target files. The poisoned name is persisted in index.json and reconstructed by _load(), allowing the out-of-root path to survive later registry loads. An application that forwards request data into these fields can therefore write Prompt.raw bytes to attacker-chosen paths writable by the application process. This issue is fixed in version 2.4.5.

• CWE-22

• https://github.com/masci/banks/commit/a215f6d779966945c56e0af5abed1ae5916fd9d3
• https://github.com/masci/banks/pull/77
• https://github.com/masci/banks/releases/tag/v2.4.5
• https://github.com/masci/banks/security/advisories/GHSA-x8wg-4xgc-vr54
• https://github.com/masci/banks/security/advisories/GHSA-x8wg-4xgc-vr54

Published

Aug 20, 2026

Last Modified

Sep 18, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7148A flaw has been found in CodeAstro Online Classroom 1.0. Thi…6.3
• CVE-2026-71485Centrifugo is an open-source scalable real-time messaging se…9.1
• CVE-2026-71486vLLM is an inference and serving engine for large language m…4.3
• CVE-2026-71488league/commonmark is a PHP library for parsing and rendering…7.5
• CVE-2026-7149A vulnerability has been found in dexhunter kaggle-mcp up to…7.3
• CVE-2026-71491sqlparse is a non-validating SQL parser module for Python. P…8.7
• CVE-2026-71493Infracost provides cloud cost intelligence for engineers, AI…5.9
• CVE-2026-71494Infracost provides cloud cost intelligence for engineers, AI…5.9
• CVE-2026-71497jsoup is a Java library for working with real-world HTML. Fr…4.7
• CVE-2026-71498node-re2 provides RE2 regular expression bindings for Node.j…5.1
• CVE-2026-7150A vulnerability was found in dh1011 auto-favicon up to f1891…6.3
• CVE-2026-71502CTI-Transmute contains a stored cross-site scripting vulnera…5.1