masci vulnerabilities

Banks: User-controlled prompt input can be parsed as privileged chat messages

masci · banks

Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

masci · banks

Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root

masci · banks

Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE

masci · banks

Banks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document)

masci · banks

Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI

masci · banks