High, CVSS 7.5NuGetAmendedPublished
Prompty: Arbitrary file read via file reference expansion
CVE-2026-53598 · GHSA-wxhm-2mq7-7697
- Affected
- NuGet prompty.core <= 2.0.0-beta.1
- Fixed in
- 2.0.0-beta.2· Vendor fix available
- Issue
- Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to the process. Affected packages - PyPI prompty versions <= 2.0.0b1; fixed in 2.0.0b2 - npm @prompty/core versions <= 2.0.0-beta.1; fixed in 2.0.0-beta.2 - crates.io prompty versions <= 2.0.0-beta.1; fixed in 2.0.0-beta.2 - NuGet Prompty.Core versions <= 2.0.0-beta.1; fixed in 2.0.0-beta.2 Impact Applications that load untrusted .prompty files, user-provided prompt paths, or prompt bundles from less-trusted locations could disclose local files available to the application process when expanded values are logged, returned, or otherwise exposed. Remediation Upgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: ${file:...} may only resolve…
Recommended action: Upgrade to 2.0.0-beta.2 (pre-release) or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.