PT-2026-30226 · Fka+1 · Prompts.Chat

Mdisec · CVE-2026-22662 · Published 2026-04-03 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions prompts.chat versions prior to commit 1464475

Description Authenticated users can exploit a blind server-side request forgery (SSRF) in the Wiro media generator. This occurs when the application performs server-side fetches of the user-controlled inputImageUrl parameter. By sending POST requests to the '/api/media-generate' endpoint, attackers can probe internal networks, access internal services, and exfiltrate data through the upstream Wiro service without receiving direct response bodies. Blind SSRF is a type of vulnerability where the attacker cannot see the response from the server they are targeting, but can still infer information based on the server's behavior.

Recommendations Update prompts.chat to commit 1464475 or later. Avoid using the inputImageUrl parameter in the '/api/media-generate' endpoint until the update is applied.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-22662

Affected Products

Prompts.Chat

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22662.json · Exploit
• https://github.com/f/prompts.chat/pull/1102 · Vendor Advisory
• https://github.com/f/prompts.chat/commit/1464475df2698fb7ccd0cdbc382b0750466f891d · Patch
• https://osv.dev/vulnerability/CVE-2026-22662 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22662 · Security Note
• https://github.com/f/prompts.chat · Note
• https://t.me/cveNotify/222495 · Telegram Post
• https://vulncheck.com/advisories/prompts-chat-blind-ssrf-via-media-generate · Note