CVE-2026-53597
8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Summary
Prompty is a markdown file format (.prompty) for LLM prompts. From 2.0.0-alpha.1 until 2.0.0-beta.3, the @prompty/core TypeScript loader in runtime/typescript/packages/core/src/core/loader.ts used gray-matter without overriding executable js and javascript frontmatter engines, allowing an attacker-controlled .prompty file with —js frontmatter to execute arbitrary JavaScript during prompt loading. This issue is fixed in version 2.0.0-beta.3.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| microsoft | prompty | >= 2.0.0-alpha.1, < 2.0.0-beta.3 | affected |
Weaknesses
- CWE-94: CWE-94: Improper Control of Generation of Code ('Code Injection')
References
- https://github.com/microsoft/prompty/security/advisories/GHSA-c4gh-rv8h-q9vw
- https://github.com/microsoft/prompty/commit/c27402da2487075be577f06aa79df627fb9d6853
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.