# CVE-2026-22661: prompts.chat path traversal in skill file handling

Source: https://junglewise.ai/threats/cve-2026-22661-prompts-chat-path-traversal-in-skill-file-handling  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-03. Updated: 2026-05-26  
License: CC BY 4.0 with a link back

CVE-2026-22661 · Severity: high · CVSS 8.1 · Published 2026-04-03

prompts.chat, a platform for sharing AI prompts and skills, was found to have a security flaw in how it handles "skill" files. An attacker could create a malicious skill that, when downloaded and extracted by a user, writes dangerous files to the user's computer. This could allow the attacker to take control of the victim's system by overwriting critical startup files.

Technologies: [F Awesome ChatGPT Prompts](https://junglewise.ai/threats/technologies/awesome-chatgpt-prompts), [Fka Prompts.Chat](https://junglewise.ai/threats/technologies/prompts-chat). Vendors: [F](https://junglewise.ai/threats/vendors/f), [Fka](https://junglewise.ai/threats/vendors/fka).

## Quick answers

**Is CVE-2026-22661 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-22661 being exploited in the wild.

**How severe is CVE-2026-22661?** High severity, with a CVSS score of 8.1, published 3 April 2026.

**Which products and versions are affected?** fka prompts.chat prior to commit 0f8d4c3.

**Is there a fix for CVE-2026-22661?** A patch was published on 2026-03-29: Fix merged into main branch Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-22661 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-22661?** Check whether you run F Awesome ChatGPT Prompts or Fka Prompts.Chat. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A path traversal vulnerability (Zip Slip) exists in prompts.chat due to missing server-side validation of filenames within 'skill' archives. While client-side validation was present, the server-side endpoints (including MCP and API routes) failed to sanitize filenames containing '../' sequences. An attacker can inject these sequences into skill files; when a victim downloads and extracts the resulting ZIP archive using a vulnerable tool, files can be written outside the intended directory. This can be escalated to remote code execution (RCE) by overwriting shell initialization files like .bashrc or .zshrc. The issue was addressed in commit 0f8d4c3 by implementing filename sanitization during the ZIP generation process.

## Affected products

- fka prompts.chat prior to commit 0f8d4c3

## Timeline

- 2026-03-25: disclosed: Vulnerability reported to vendor
- 2026-03-29: patched: Fix merged into main branch
- 2026-04-03: advisory: CVE published

## References

- [https://github.com/f/prompts.chat/commit/0f8d4c381abd7b2d7478c9fdee9522149c2d65e5](https://github.com/f/prompts.chat/commit/0f8d4c381abd7b2d7478c9fdee9522149c2d65e5)
- [https://github.com/f/prompts.chat/pull/1101](https://github.com/f/prompts.chat/pull/1101)
- [https://www.vulncheck.com/advisories/prompts-chat-path-traversal-via-skill-file-handling](https://www.vulncheck.com/advisories/prompts-chat-path-traversal-via-skill-file-handling)

## Related threats

- [prompts.chat identity confusion via case-sensitive username handling](https://junglewise.ai/threats/cve-2026-22665-prompts-chat-identity-confusion-via-case-sensitive-username)
- [prompts.chat SSRF and credential leak in Fal.ai polling](https://junglewise.ai/threats/cve-2026-22664-prompts-chat-ssrf-and-credential-leak-in-fal-ai-polling)
- [prompts.chat authorization bypass in API endpoints and metadata generation](https://junglewise.ai/threats/cve-2026-22663-prompts-chat-authorization-bypass-in-api-endpoints-and-metadata)
- [prompts.chat blind SSRF in Wiro media generator](https://junglewise.ai/threats/cve-2026-22662-prompts-chat-blind-ssrf-in-wiro-media-generator)