CVE-2026-71492

Name of the Vulnerable Software and Affected Versions Banks versions prior to 2.4.5

Description The DirectoryPromptRegistry.set() function in src/banks/registries/directory.py fails to perform canonicalization or containment validation when interpolating Prompt.name and Prompt.version values into a Path. This allows an attacker to use relative traversal sequences, such as ../victim/foo, or absolute paths in Prompt.name to escape the configured registry root. When overwrite=True is used, existing target files can be replaced. The malicious path is stored in index.json and reconstructed by the load() function, ensuring the path persists across registry loads. Consequently, an application that passes request data into these fields can be forced to write Prompt.raw bytes to arbitrary paths accessible to the application process.

Recommendations Update to version 2.4.5.