CVE-2026-107716

Name of the Vulnerable Software and Affected Versions Banks versions prior to 2.5.1

Description In banks.registries.DirectoryPromptRegistry, the system fails to reject symbolic links for the index.json file and discovered .jinja prompt files. In environments where untrusted users can influence the prompt directory—such as through unpacked archives or shared repositories—this can lead to arbitrary file disclosure and arbitrary file overwrite. Specifically, the DirectoryPromptRegistry. scan() and DirectoryPromptRegistry.get() functions can follow links outside the registry root to disclose files, while DirectoryPromptRegistry.set(), DirectoryPromptRegistry. save(), and DirectoryPromptRegistry. load() can read or overwrite external link targets. This occurs because the index path is not checked for symbolic links, and .jinja files are indexed without verifying if the resolved path escapes the registry root.

Recommendations Update Banks to version 2.5.1. As a temporary mitigation, restrict untrusted users from influencing the prompt directory or its extracted contents.