File Exfiltration Vulnerability in DSPy by Stanford NLP

CVE-2026-72742

What is CVE-2026-72742?

DSPy version 3.3.0b1 contains a vulnerability that allows attackers to exploit the Image and Audio output field adapters. By manipulating the url field of parsed outputs, an attacker can influence the language model to read arbitrary local files. This occurs when untrusted outputs are processed through TypeAdapter validation in JSONAdapter and ChatAdapter, triggering functions that read local file paths. The system embeds the contents of these files into outgoing messages, effectively leaking sensitive information to an attacker-controlled model endpoint.

References