Prompty: Arbitrary file read via file reference expansion

Description

Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to the process.

Recommendation

Update the @prompty/core package to the latest compatible version. Followings are version details:

• Affected version(s): <= 2.0.0-beta.1
• Patched version(s): 2.0.0-beta.2

References

• GHSA-wxhm-2mq7-7697
• CVE-2026-53598
• CWE-200
• CWE-22
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader - CVE-2026-53597
• @babel/core: Arbitrary File Read via sourceMappingURL Comment - CVE-2026-49356
• PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments - CVE-2026-45623
• Saltcorn has an Unauthenticated Path Traversal in sync endpoints, allowing arbitrary file write and directory read - CVE-2026-40163

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@prompty/core