Promptly Arbitrary File Read via ${file:...} Expansion (CVE-2026-5598)
Security Advisory
CVE-2026-5598
Critical
Microsoft
Affected:
- @promptly/core <= 2.0.0-beta.1
- Promptly.Core <= 2.0.0-beta.1
- promptly (pip) <= 2.0.0.01
- promptly (Rust) <= 2.0.0-beta.1
Fixed in:
- @promptly/core >= 2.0.0-beta.2
- Promptly.Core >= 2.0.0-beta.2
- promptly (pip) >= 2.0.0.02
- promptly (Rust) >= 2.0.0-beta.2
Referenced CVEs:
CVE-2026-53598 · 7.5
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.