CVE-2026-22665
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
prompts.chat prior to commit 1464475 contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit non-deterministic username resolution to impersonate victim accounts, replace profile content on canonical URLs, and inject attacker-controlled metadata and content across the platform.
Risk Assessment
The risk includes potential impersonation of users, modification of profile content, and injection of malicious content, which could compromise data integrity and authenticity on the platform.
Recommendation
It is recommended to immediately update prompts.chat to a version containing commit 1464475, which fixes this vulnerability, and implement consistent case handling for usernames.
Other vulnerabilities in prompts.chat
See all- CVE-2026-22664High
prompts.chat prior to commit 30a8f04 has a server-side request forgery (SSRF) vulnerability in the Fal.ai media status polling feature. Authenticated users can perform arbitrary outbound requests by supplying attacker-controlled URLs in the token parameter, leading to disclosure of the FAL_API_KEY in the Authorization header.
- CVE-2026-22663High
In prompts.chat prior to commit 7b81836, missing isPrivate checks across API endpoints and page metadata generation allow unauthorized users to access sensitive data associated with private prompts, including version history, change requests, examples, current content, and metadata (titles, descriptions).
- CVE-2026-22662Medium
prompts.chat prior to commit 1464475 contains a blind SSRF vulnerability in the Wiro media generator. Authenticated users can send POST requests to /api/media-generate with a controlled inputImageUrl parameter, allowing them to probe internal networks, access internal services, and exfiltrate data through the Wiro service.
- CVE-2026-22661High
prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling. Attackers can write arbitrary files to the client system by crafting malicious ZIP archives with unsanitized filenames containing path traversal sequences (../).
Original NVD description (English source)
prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, allowing attackers to create case-variant usernames that bypass uniqueness checks. Attackers can exploit non-deterministic username resolution to impersonate victim accounts, replace profile content on canonical URLs, and inject attacker-controlled metadata and content across the platform.