masci vulnerabilities

Products

• banks 6

Latest masci CVEs

Newest publication first

1. CVE-2026-107717 Banks: User-controlled prompt input can be parsed as privileged chat messages

   Published 2026-10-08

   Medium·CVSS 6.5 EPSS 0.34%

   Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.0, Banks Prompt.chat_messages() attempts to parse every line of rendered template output as ChatMessage JSON. When an application renders untrusted data and passes the returned ChatMessage objec...

2. CVE-2026-107716 Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

   Published 2026-10-08

   High·CVSS 7.3 EPSS 0.13%

   Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index.json or discovered and existing .jinja prompt files. In an application where untrusted users can influence a prompt dire...

3. CVE-2026-71492 Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root

   Published 2026-08-20

   Medium·CVSS 6.0 EPSS 0.47%

   Banks generates meaningful LLM prompts using a simple template language. Prior to version 2.4.5, DirectoryPromptRegistry.set() in src/banks/registries/directory.py interpolates attacker-controlled Prompt.name and Prompt.version values into a Path without canonicalization or conta...

4. CVE-2026-61536 Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE

   Published 2026-07-30

   High·CVSS 7.5 EPSS 0.38%

   Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.3, banks parses Tool JSON objects from the rendered body of {% completion %} blocks and later resolves their import_path field through importlib.import_module(...) + getattr(...) to...

5. CVE-2026-62663 Banks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document)

   Published 2026-07-30

   High·CVSS 7.5 EPSS 0.40%

   Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters (image, audio, video, document) in banks accept untrusted user input as file paths via Path(value) and pass them directly to open(file_path, "rb") without a...

6. CVE-2026-44209 Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI

   Published 2026-05-26

   High·CVSS 7.5 EPSS 0.42%

   Banks generates meaningful LLM prompts using a template language that makes sense. Prior to 2.4.2, banks uses jinja2.Environment() (unsandboxed) to render prompt templates. Applications that pass user-supplied strings as the template argument to Prompt() are vulnerable to Server-...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.