CVE-2026-22662
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
prompts.chat prior to commit 1464475 contains a blind SSRF vulnerability in the Wiro media generator. Authenticated users can send POST requests to /api/media-generate with a controlled inputImageUrl parameter, allowing them to probe internal networks, access internal services, and exfiltrate data through the Wiro service.
Risk Assessment
An attacker can probe internal network infrastructure, access sensitive internal services, and leak data, potentially leading to a breach of confidentiality and system integrity.
Recommendation
It is recommended to update prompts.chat to a version containing commit 1464475 or later, which removes this vulnerability.
Other vulnerabilities in prompts.chat
See all- CVE-2026-22665High
prompts.chat prior to commit 1464475 contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit non-deterministic username resolution to impersonate victim accounts, replace profile content on canonical URLs, and inject attacker-controlled metadata and content across the platform.
- CVE-2026-22664High
prompts.chat prior to commit 30a8f04 has a server-side request forgery (SSRF) vulnerability in the Fal.ai media status polling feature. Authenticated users can perform arbitrary outbound requests by supplying attacker-controlled URLs in the token parameter, leading to disclosure of the FAL_API_KEY in the Authorization header.
- CVE-2026-22663High
In prompts.chat prior to commit 7b81836, missing isPrivate checks across API endpoints and page metadata generation allow unauthorized users to access sensitive data associated with private prompts, including version history, change requests, examples, current content, and metadata (titles, descriptions).
- CVE-2026-22661High
prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling. Attackers can write arbitrary files to the client system by crafting malicious ZIP archives with unsanitized filenames containing path traversal sequences (../).
Original NVD description (English source)
prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform server-side fetches of user-controlled inputImageUrl parameters. Attackers can exploit this vulnerability by sending POST requests to the /api/media-generate endpoint to probe internal networks, access internal services, and exfiltrate data through the upstream Wiro service without receiving direct response bodies.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS