CVE-2026-53597 | microsoft prompty up to 2.0.0-beta.2 Loader loader.ts os command injection

July 16, 2026 Yanac

A vulnerability was found in microsoft prompty up to 2.0.0-beta.2. It has been classified as critical. Affected by this issue is some unknown functionality of the file runtime/typescript/packages/core/src/core/loader.ts of the component Loader. Performing a manipulation results in os command injection.

This vulnerability is known as CVE-2026-53597. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More