CVE-2026-22662

prompts.chat Blind SSRF via media-generate

Published Apr 3, 2026 CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Description

prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform server-side fetches of user-controlled inputImageUrl parameters. Attackers can exploit this vulnerability by sending POST requests to the /api/media-generate endpoint to probe internal networks, access internal services, and exfiltrate data through the upstream Wiro service without receiving direct response bodies.

Analysis

Technical impact

Prompts.chat before commit 1464475 contains a blind server‑side request forgery flaw in the media‑generator API. Authenticated users can send POST requests to /api/media-generate with a crafted inputImageUrl, causing the server to fetch arbitrary internal URLs. The request result is not returned to the caller; however, the upstream Wiro service can forward data out of the network, providing an indirect exfiltration channel. The vulnerability is identified as CWE‑918.

Affected Systems

All releases of Prompts.chat prior to commit 1464475 are affected. No specific version numbers are listed in the CNA data. The product is the Prompts.chat web application hosted by the f:prompts.chat vendor.

Risk and Exploitability

The CVSS score is 5.3, indicating moderate severity, and the EPSS score is below 1%, suggesting low current exploitation prevalence. The vulnerability is not listed in CISA’s known exploited vulnerability catalog. Exploitation requires authenticated access and sending a crafted POST request; it allows probing of internal services and potential data exfiltration through the Wiro service, but no direct payload is returned to the attacker. Given these facts, patching is advised to eliminate the blind SSRF channel.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

prompts.chat

unaffected

Version	Status	Constraints
`0`	affected	< 1464475

Configuration 1 [-]

cpe:2.3:a:fka:prompts.chat:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Prompts.chat

Version	Status	Scheme	Platform
`[0,66de14d3cf3f99489ac9840fad66c7f1ddedb7a8)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the patch found in commit 1464475 or any later release
If a patch cannot be applied immediately, disable the /api/media‑generate endpoint or restrict it so that only trusted users can access it
Limit or monitor the upstream Wiro service to prevent unintended data forwarding
Monitor server logs for unexpected outbound requests to internal addresses
Consider network segmentation to isolate the Prompts.chat server from critical internal resources

Generated by OpenCVE AI on April 13, 2026 at 19:26 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.203% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/f/prompts.chat/commit/1464475df2698fb7ccd0cdbc382b0750466f891d
https://github.com/f/prompts.chat/pull/1102
https://www.vulncheck.com/advisories/prompts-chat-blind-ssrf-via-media-generate

History

Apr 13, 2026 6:30 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Fka Fka prompts.chat
CPEs		cpe:2.3:a:fka:prompts.chat::::::::
Vendors & Products		Fka Fka prompts.chat

Apr 7, 2026 12:00 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		F F prompts.chat
Vendors & Products		F F prompts.chat

Apr 6, 2026 4:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Apr 3, 2026 9:30 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform server-side fetches of user-controlled inputImageUrl parameters. Attackers can exploit this vulnerability by sending POST requests to the /api/media-generate endpoint to probe internal networks, access internal services, and exfiltrate data through the upstream Wiro service without receiving direct response bodies.
Title		prompts.chat Blind SSRF via media-generate
Weaknesses		CWE-918
References		https://github.com/f/prompts.chat/commit/1464475df2698fb7ccd0cdbc382b0750466f891d https://github.com/f/prompts.chat/pull/1102 https://www.vulncheck.com/advisories/prompts-chat-blind-ssrf-via-media-generate
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}`