TI-2026-44773 CVE-2026-62663
Banks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document)
Priority HIGH 72
Banks generates meaningful LLM prompts using a simple template language.
masci
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
masci records in CISA KEVNo masci vulnerabilities are listed in CISA KEV.
Records
6 records
TI-2026-69696 CVE-2026-107717 · GHSA-hmq2-7hp6-7crh
Banks parses untrusted prompt input as privileged chat messages
Priority HIGH 68
Banks generates meaningful LLM prompts using a simple template language.
TI-2026-44099 CVE-2026-61536 · GHSA-64vx-6h2c-rjh7
Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE
Priority HIGH 68
Banks generates meaningful LLM prompts using a simple template language.
TI-2026-32188 CVE-2026-44209 · GHSA-gphh-9q3h-jgpp
Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI
Priority HIGH 68
Banks generates meaningful LLM prompts using a template language that makes sense.
TI-2026-50100 CVE-2026-71492 · GHSA-x8wg-4xgc-vr54
Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root
Priority MEDIUM 60
Banks generates meaningful LLM prompts using a simple template language.
TI-2026-69682 CVE-2026-107716 · GHSA-556j-vv39-8rqv
Symlink traversal in Banks DirectoryPromptRegistry
Priority LOW 31
Banks generates meaningful LLM prompts using a simple template language.