{"id":"CVE-2026-53598","sourceIdentifier":"security-advisories@github.com","published":"2026-07-16T16:19:12.990","lastModified":"2026-10-24T20:10:00.137","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that resolved paths stayed within the prompt directory or allowed roots, allowing an attacker-controlled prompt file to read local files through absolute paths, .. traversal, or symlink escapes. This issue is fixed in versions 2.0.0-beta.2."},{"lang":"es","value":"Prompty es un formato de archivo markdown (.prompty) para prompts de LLM. Antes de la versión 2.0.0-beta.2, los cargadores de Prompty expandían las referencias ${file:...} en el ’frontmatter’ de .prompty sin asegurar que las rutas resueltas permanecieran dentro del directorio del prompt o de las raíces permitidas, permitiendo que un archivo de prompt controlado por un atacante leyera archivos locales a través de rutas absolutas, el recorrido de directorios con ’..’ o escapes de enlaces simbólicos. Este problema está solucionado en las versiones 2.0.0-beta.2."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"microsoft","product":"prompty","versions":[{"version":"< 2.0.0-beta.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-17T14:06:30.453913Z","id":"CVE-2026-53598","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"},{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://github.com/microsoft/prompty/commit/88ac9948d7d37995edbb2f6d36913436626c39e1","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/prompty/security/advisories/GHSA-wxhm-2mq7-7697","source":"security-advisories@github.com"}]}