Path Traversal in Masci Banks
CVE-2026-62663
Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters (image, audio, video, document) in banks accept untrusted user input as file paths via Path(value) and pass them di…
Vulnerability class: Path Traversal (Directory Traversal)
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Masci Banks — versions < 2.4.4
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2026-62663?
- CVE-2026-62663 is a high-severity vulnerability in Masci Banks, classified under Path Traversal. CVSS score: 7.5/10. Published 2026-07-30.
- How severe is CVE-2026-62663?
- High severity. CVSS v3 base score is 7.5 out of 10.