VulnSocial

CVE-2026-22661Disclosure(fka / prompts.chat)

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attackers to write arbitrary files to the client system by crafting malicious ZIP archives with unsanitized filenames containing path traversal sequences. Attackers can exploit missing server-side filename validation to inject path traversal sequences ../ into skill file archives, which when extracted by vulnerable tools writing files outside the intended directory and overwriting shell initialization files to achieve code execution.

fka CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • prompts.chat

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
fka
Products
prompts.chat

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-04: 1Technical Details · 2026-04-04: 104-04
Signal classification1 categories
Disclosure
1100.0%
Referenced assets2 URLs
By indicator
Full discourse1 post
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-22661 - High http://prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attackers to write arbitrary files to the client system by crafting malicious Z... https://www.thehackerwire.com/vulnerability/CVE-2026-22661/ https://t.co/ObERyOCAqo

    Post summary

    CVE-2026-22661 is identified as a high‑severity path traversal flaw in skill file handling that permits arbitrary file writes on client systems. No exploitation evidence or mitigation steps are mentioned in the provided text.

    0000048
    164 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appfkaprompts.chat---

Explore more

Back to dashboardfka CVEsprompts.chat vulnerabilities