{"id":"CVE-2026-72742","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-72742","summary":"DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary…","details":"DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The JSONAdapter and ChatAdapter parse untrusted language model completions through parse_value into TypeAdapter validation, which triggers encode_image or encode_audio to read and base64-encode any local file path via the os.path.isfile branch in image.py and audio.py, subsequently embedding the file contents into outgoing prompt messages sent to the attacker-controlled model endpoint.","published":"2026-08-11T19:18:49.130","modified":"2026-08-11T19:18:49.130","cvss":{"score":8.6,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":{"url":"https://github.com/stanfordnlp/dspy/commit/c69136b29aca4c00ca6da7667f7b80783188980e","label":"stanfordnlp/dspy@c69136b"},"references":[{"type":"WEB","url":"https://github.com/stanfordnlp/dspy"},{"type":"WEB","url":"https://github.com/stanfordnlp/dspy/commit/c69136b29aca4c00ca6da7667f7b80783188980e"},{"type":"WEB","url":"https://github.com/stanfordnlp/dspy/issues/10067"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/dspy-0b1-local-file-read-via-image-audio-output-field-parsing"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-11T19:18:49.130"}}