Mmasci

Products

Exploited and recent CVEs

• CVE-2026-107717 Medium 6.5 Banks: User-controlled prompt input can be parsed as privileged chat messages 0.3%
• CVE-2026-107716 High 7.3 Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry 0.1%
• CVE-2026-71492 Medium 6.0 Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root 0.5%
• CVE-2026-61536 High 7.5 Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE 0.4%
• CVE-2026-62663 High 7.5 Banks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document) 0.4%
• CVE-2026-44209 High 7.5 Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI 0.4%