What’s Vulnerable › Products

masci banks vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your masci banks version is affected

Latest masci banks vulnerabilities

• CVE-2026-107717 — Banks: User-controlled prompt input can be parsed as privileged chat messages (CVSS 6.5)
• CVE-2026-107716 — Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry (CVSS 7.3)
• CVE-2026-71492 — Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root (CVSS 6.0)
• CVE-2026-61536 — Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE (CVSS 7.5)
• CVE-2026-62663 — Banks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document) (CVSS 7.5)
• CVE-2026-44209 — Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI (CVSS 7.5)