{"vulnerability": "CVE-2026-73299", "sightings": [{"uuid": "cc132a5c-536a-4f2b-ab5b-326a5570ad74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73299", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvqljaubz2q", "content": "CVE-2026-73299 - prompty\nA security issue in Prompty, a markdown file format for LLM prompts, allowed an attacker to run malicious code on the server. This could potentially lead to unauthorized actions or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#prompty #microsoft #CVE #infosec", "creation_timestamp": "2026-08-12T18:20:13.907632Z"}, {"uuid": "9e5e6d7e-4b28-41e9-8c0b-fb8a3fc49175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73299", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvw7lsbas2u", "content": "\ud83d\udd34 CVE-2026-73299 - Critical (10)\n\nPrompty is a markdown file format (.prompty) for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73299/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T20:00:49.080382Z"}, {"uuid": "18fe1693-953b-4212-80c9-984fe6f2bd3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73299", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mumoukn6yp24", "content": "A critical Prompty vulnerability (CVE-2026-73299, CVSS 10) let a crafted .prompty file escape the template engine and run arbitrary JavaScript in Node.js.\n\n#Prompty #Microsoft #SSTI #RCE #CVE202673299", "creation_timestamp": "2026-09-03T14:45:47.808627Z"}]}