{"uuid": "18fe1693-953b-4212-80c9-984fe6f2bd3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73299", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mumoukn6yp24", "content": "A critical Prompty vulnerability (CVE-2026-73299, CVSS 10) let a crafted .prompty file escape the template engine and run arbitrary JavaScript in Node.js.\n\n#Prompty #Microsoft #SSTI #RCE #CVE202673299", "creation_timestamp": "2026-09-03T14:45:47.808627Z"}