VULNRABLE / Vulnerability / CVE-2026-71492

CVE-2026-71492

MEDIUM LOW banks GHSA

Exploit verdict: No active-exploit signal

CVSS Score
5.5
Severity
MEDIUM
EPSS
0%
Source
GHSA

Summary

Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root

What this means

CVE-2026-71492 is a medium-severity vulnerability affecting banks, rated CVSS 5.5. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published September 2, 2026.

View full advisory at GHSA →