CVE-2026-72742

The record

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The JSONAdapter and ChatAdapter parse untrusted language model completions through parse_value into TypeAdapter validation, which triggers encode_image or encode_audio to read and base64-encode any local file path via the os.path.isfile branch in image.py and audio.py, subsequently embedding the file contents into outgoing prompt messages sent to the attacker-controlled model endpoint.

Affected packages

Related vulnerabilities

• CVE-2026-119672 MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output… CWE-73
• CVE-2026-97350 Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of… CWE-73
• CVE-2026-118437 The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before… CWE-73
• CVE-2026-119343 Stirling-PDF is a locally hosted web application that facilitates various operations on… CWE-73
• CVE-2026-119328 Immich is a high-performance self-hosted photo and video management solution. CWE-73
• CVE-2026-116249 In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and… CWE-73
• CVE-2026-119298 croc is a tool that allows any two computers to simply and securely transfer files and… CWE-73
• CVE-2026-61738 SOCFortress CoPilot focuses on providing a single pane of glass for all your security… CWE-73