Path Traversal Vulnerability in Banks Affects Multiple Media Filters

CVE-2026-62663

What is CVE-2026-62663?

The Banks plugin is vulnerable due to its handling of untrusted user input for file paths without proper sanitization or directory restrictions. Attackers can exploit this flaw via path traversal techniques to access sensitive files, including environment variables, SSH keys, and system files. This vulnerability allows for easy exfiltration of critical data via rendered prompt outputs. The issue has been resolved in version 2.4.4, which mitigates these risks.

References