CVE-2026-53598, CoreCVE

Back Back to CVE browser

HIGH

Prompty: Arbitrary File Read via ${file:path} Reference Expansion

Published Jul 16, 2026

7.5

HIGH

CVSS 3.1

EPSS 1.29%

Description

Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that resolved paths stayed within the prompt directory or allowed roots, allowing an attacker-controlled prompt file to read local files through absolute paths, .. traversal, or symlink escapes. This issue is fixed in versions 2.0.0-beta.2.

Affected products

Vendor Microsoft Product Prompty Default
n/a
- Version
  < 2.0.0-beta.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Prompty

n/a

Version	Status	Constraints
< 2.0.0-beta.2	affected	-

prompty

crates.io

Introduced 0 Fixed 2.0.0-beta.2
Prompty.Core

NuGet

Introduced 0 Fixed 2.0.0-beta.2
prompty

PyPI

Introduced 0 Fixed 2.0.0b2
@prompty/core

npm

Introduced 0 Fixed 2.0.0-beta.2

Ecosystem	Package	Fixed
crates.io	prompty	2.0.0-beta.2
NuGet	Prompty.Core	2.0.0-beta.2
PyPI	prompty	2.0.0b2
npm	@prompty/core	2.0.0-beta.2

Remediation

No remediation recorded yet.

Metrics

1.29% 0.01286

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01286

Score over time

Jul–Oct 2026

EPSS v5

Percentile over time

EPSS v5

Table of values (2 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.29% (0.01286)	69.09th	v5 (v2026.06.15)
Jul 17, 2026	1.06% (0.01057)	60.65th	v5 (v2026.06.15)

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-22

Path Traversal

References (4)

https://github.com/advisories/GHSA-wxhm-2mq7-7697
Advisory
https://github.com/microsoft/prompty/commit/88ac9948d7d37995edbb2f6d36913436626c39e1
x_refsource_MISC
https://github.com/microsoft/prompty/security/advisories/GHSA-wxhm-2mq7-7697
x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2026-53598

Link	Providers	Tags
https://github.com/advisories/GHSA-wxhm-2mq7-7697		Advisory
https://github.com/microsoft/prompty/commit/88ac9948d7d37995edbb2f6d36913436626c39e1		x_refsource_MISC
https://github.com/microsoft/prompty/security/advisories/GHSA-wxhm-2mq7-7697		x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2026-53598