AIKIDO-2026-10478
ai-prompter is vulnerable to Server-Side Template Injection (SSTI)
92
Critical Risk
This Affects:
ai-prompterTL;DR
Prompt rendering uses Jinja2 with a standard Environment, so template expressions are evaluated with full Python reachability when caller-controlled template text or fragments are passed into Prompter. A crafted template can invoke dangerous attribute chains and achieve arbitrary code execution in the host process. The change replaces default and dynamically constructed environments with jinja2.sandbox.SandboxedEnvironment, blocking typical sandbox-escape gadget paths while still rendering normal prompts.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
ai-prompter is vulnerable to Server-Side Template Injection (SSTI) in versions 0.1.0 - 0.3.2.
How to fix this
Upgrade the ai-prompter library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant