Executive brief
prompts.chat, a platform for sharing AI prompts, contains a security flaw in its Wiro media generation component. An authenticated user can trick the server into making unauthorized requests to internal network resources or external services. While the attacker cannot see the direct response from these requests, they can use this flaw to map internal networks or exfiltrate data through the third-party Wiro service.
Technical details
A blind Server-Side Request Forgery (SSRF) vulnerability exists in the Wiro media generator plugin within prompts.chat. The application used the fetch() API to retrieve images from a user-provided 'inputImageUrl' parameter at the /api/media-generate endpoint before uploading them to the Wiro service. Because the server performed these fetches without adequate validation, an authenticated attacker could probe internal network services or perform out-of-band data exfiltration. The vulnerability was remediated by refactoring the code to pass the URL directly to Wiro's API instead of fetching the content server-side. The fix is available in commit 1464475.
Affected products
- f prompts.chat prior to commit 1464475
Timeline
- 2026-03-24: patched: Commit 1464475 submitted to fix the SSRF.
- 2026-04-03: advisory: CVE-2026-22662 published.