TI-2026-50977 CVE-2026-72742 · GHSA-vg2p-rf25-4wrx
DSPy 3.3.0b1 Local File Read via Image/Audio Output Field Parsing
Priority MEDIUM 46
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesyste…