PT-2026-30225 · Unknown · Prompts.Chat

Mdisec · CVE-2026-22661 · Published 2026-04-03 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions prompts.chat versions prior to commit 0f8d4c3

Description prompts.chat before commit 0f8d4c3 has a path traversal flaw in how it handles skill files. Attackers can create malicious ZIP archives with filenames containing path traversal sequences, like ../, to write arbitrary files to the client system. The lack of server-side filename validation allows attackers to inject these sequences. Extracting these archives with vulnerable tools can lead to files being written outside the intended directory, potentially overwriting shell initialization files and achieving code execution.

Recommendations Update prompts.chat to commit 0f8d4c3 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-22661

Affected Products

Prompts.Chat

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22661.json · Exploit
• https://github.com/f/prompts.chat/pull/1101 · Vendor Advisory
• https://github.com/f/prompts.chat/commit/0f8d4c381abd7b2d7478c9fdee9522149c2d65e5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-22661 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22661 · Vendor Advisory
• https://github.com/f/prompts.chat · Note
• https://vulncheck.com/advisories/prompts-chat-path-traversal-via-skill-file-handling · Note
• https://t.me/cveNotify/222494 · Telegram Post
• https://twitter.com/TheHackerWire/status/2040312696437145655 · Twitter Post