CVE-2026-53598: Prompty: Arbitrary file read via file reference expansion

Summary Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal…

7.5CVSS Score

HIGHSeverity

NOCISA KEV

1.1%EPSS Score

Security VulnerabilityImpact Type

📋 Vulnerability Details

CVE ID	CVE-2026-53598
Vendor	Unknown Vendor
Affected Product	Unknown Product
Vulnerability Type	Security Vulnerability
CVSS Score	7.5 (HIGH)
EPSS Score	1.1% probability of exploitation in the next 30 days
Actively Exploited	❌ No known exploitation
Patch Status	Pending Vendor Disclosure
Reported By	CYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

Summary

Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to the process.

Affected packages

• PyPI prompty versions <= 2.0.0b1; fixed in 2.0.0b2

• npm @prompty/core versions <= 2.0.0-beta.1; fixed in 2.0.0-beta.2

• crates.io prompty versions <= 2.0.0-beta.1; fixed in 2.0.0-beta.2

• NuGet Prompty.Core versions <= 2.0.0-beta.1; fixed in 2.0.0-beta.2

Impact

Applications that load untrusted .prompty files, user-provided prompt paths, or prompt bundles from less-trusted locations could disclose local files available to th

🎯 Known Indicators of Compromise

{"type":"domain","value":"crates.io","confidence_score":0.75,"first_seen":"2026-07-18","source_count":1}

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-53598 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries

🛡️ Get Detection Pack → 🔌 Access via API →