PT-2026-30229 · Unknown · Prompts.Chat

Published 2026-04-03 · Updated 2026-04-03 · CVE-2026-22665

Positive Technologies · (AI Summary)

CVSS v3.1

8.1

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions prompts.chat versions prior to commit 1464475

Description prompts.chat is susceptible to an identity confusion issue stemming from inconsistent case sensitivity in username handling during write and read operations. This allows attackers to create usernames that differ only in case, bypassing uniqueness checks. Successful exploitation enables attackers to impersonate legitimate users, replace profile content associated with canonical URLs, and inject malicious metadata and content into the platform.

Recommendations Update prompts.chat to a version after commit 1464475.

Fix

Weakness Enumeration

CWE-178

Related Identifiers

CVE-2026-22665

Affected Products

Prompts.Chat

References · 5

• https://github.com/f/prompts.chat/commit/1464475df2698fb7ccd0cdbc382b0750466f891d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-22665 · Security Note
• https://github.com/f/prompts.chat/pull/1098 · Note
• https://vulncheck.com/advisories/prompts-chat-identity-confusion-via-case-sensitive-username-handling · Note
• https://twitter.com/CveFindCom/status/2040175589718474978 · Twitter Post