CVE-2026-22664
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
prompts.chat prior to commit 30a8f04 has a server-side request forgery (SSRF) vulnerability in the Fal.ai media status polling feature. Authenticated users can perform arbitrary outbound requests by supplying attacker-controlled URLs in the token parameter, leading to disclosure of the FAL_API_KEY in the Authorization header.
Risk Assessment
An attacker can steal the Fal.ai API key, perform internal network scanning, and abuse the victim's Fal.ai account, potentially leading to data theft and unauthorized operations.
Recommendation
Update prompts.chat to a version containing commit 30a8f04 or later.
Other vulnerabilities in prompts.chat
See all- CVE-2026-22665High
prompts.chat prior to commit 1464475 contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit non-deterministic username resolution to impersonate victim accounts, replace profile content on canonical URLs, and inject attacker-controlled metadata and content across the platform.
- CVE-2026-22663High
In prompts.chat prior to commit 7b81836, missing isPrivate checks across API endpoints and page metadata generation allow unauthorized users to access sensitive data associated with private prompts, including version history, change requests, examples, current content, and metadata (titles, descriptions).
- CVE-2026-22662Medium
prompts.chat prior to commit 1464475 contains a blind SSRF vulnerability in the Wiro media generator. Authenticated users can send POST requests to /api/media-generate with a controlled inputImageUrl parameter, allowing them to probe internal networks, access internal services, and exfiltrate data through the Wiro service.
- CVE-2026-22661High
prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling. Attackers can write arbitrary files to the client system by crafting malicious ZIP archives with unsanitized filenames containing path traversal sequences (../).
Original NVD description (English source)
prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media status polling feature that allows authenticated users to perform arbitrary outbound requests by supplying attacker-controlled URLs in the token parameter. Attackers can exploit the lack of URL validation to disclose the FAL_API_KEY in the Authorization header, enabling credential theft, internal network probing, and abuse of the victim's Fal.ai account.