CyberRota Analysis
AI-GeneratedPrompty versions prior to 2.0.0-beta.2 are vulnerable due to improper handling of file references in markdown frontmatter, which allows attackers to exploit these references to access local files through absolute paths, directory traversal, or symlink escapes. The potential impact includes unauthorized data exposure and system compromise. Organizations using affected versions should prioritize upgrading to the fixed version to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that resolved paths stayed within the prompt directory or allowed roots, allowing an attacker-controlled prompt file to read local files through absolute paths, .. traversal, or symlink escapes. This issue is fixed in versions 2.0.0-beta.2.