CVE-2026-62663

Name of the Vulnerable Software and Affected Versions Banks versions prior to 2.4.4

Description Banks uses a template language to generate LLM prompts. The media filters for image, audio, video, and document accept untrusted user input as file paths via Path(value) and pass them to the open(file path, "rb") function without sanitization, canonicalization, or directory restriction. An attacker controlling template variables can use path traversal (../) to read arbitrary files accessible to the Python process, such as .env files, SSH keys, cloud credentials, source code, /etc/passwd, and /etc/shadow. The content is returned base64-encoded in the rendered prompt output.

Recommendations Update to version 2.4.4.