CVE-2026-72742

Name of the Vulnerable Software and Affected Versions DSPy version 3.3.0b1

Description An issue in the Image and Audio output field adapters allows attackers who can influence language model outputs to read arbitrary local files. This occurs when a filesystem path is injected into the url field of a parsed Image or Audio typed output. The JSONAdapter and ChatAdapter process untrusted language model completions using the parse value() function for TypeAdapter validation. This process triggers the encode image() or encode audio() functions to read and base64-encode any local file path via the os.path.isfile branch in image.py and audio.py, which then embeds the file contents into prompt messages sent to an attacker-controlled model endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.