CVE-2026-107716 | masci Banks up to 2.5.0 DirectoryPromptRegistry index.json path traversal

October 8, 2026 Yanac

A vulnerability classified as critical was found in masci Banks up to 2.5.0. Impacted is the function DirectoryPromptRegistry._scan/DirectoryPromptRegistry.get/DirectoryPromptRegistry.set/DirectoryPromptRegistry._save/DirectoryPromptRegistry._load of the file index.json of the component DirectoryPromptRegistry. Executing a manipulation can lead to path traversal.

This vulnerability appears as CVE-2026-107716. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More