PT-2026-30228 · Fka · Prompts.Chat

Mdisec · Published 2026-04-03 · Updated 2026-04-03 · CVE-2026-22664

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions prompts.chat versions prior to commit 30a8f04

Description An issue in the Fal.ai media status polling feature allows authenticated users to perform arbitrary outbound requests. By supplying attacker-controlled URLs in the token parameter, the lack of URL validation can be exploited to disclose the FAL API KEY within the Authorization header. This can lead to credential theft, internal network probing, and unauthorized abuse of the victim's Fal.ai account. Server-side request forgery is a flaw where a server is tricked into making requests to an unintended location.

Recommendations Update prompts.chat to commit 30a8f04 or a later version. Avoid using the token parameter in the Fal.ai media status polling feature until the update is applied.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-22664

Affected Products

Prompts.Chat

References · 4

• 🔥 https://gist.github.com/mdisec/27c0cac0ec6a8f3c8f85a18987ddb942 · Exploit
• https://github.com/f/prompts.chat/commit/30a8f0470e0ba45e6be9c9f55220f4a9a6b91c99 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-22664 · Security Note
• https://vulncheck.com/advisories/prompts-chat-ssrf-via-fal-ai-media-status-polling · Note