Description
Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to the process.
Recommendation
Update the @prompty/core package to the latest compatible version. Followings are version details:
- Affected version(s): <= 2.0.0-beta.1
- Patched version(s): 2.0.0-beta.2
References
Could your website be exposed too?
SmartScanner can check your website for Prompty: Arbitrary file read via file reference expansion and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader - CVE-2026-53597
- @babel/core: Arbitrary File Read via sourceMappingURL Comment - CVE-2026-49356
- PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments - CVE-2026-45623
- Saltcorn has an Unauthenticated Path Traversal in sync endpoints, allowing arbitrary file write and directory read - CVE-2026-40163
You might also like:
See something that needs correcting? Let us knowUpdated August 03, 2026