AIKIDO-2026-59120
banks is vulnerable to Path Traversal
59
Medium Risk
This Affects:
banksTL;DR
DirectoryPromptRegistry in banks.registries.directory resolves prompt files and the index.json file without rejecting symbolic links. When the registry directory holds a symlink placed through untrusted archive extraction, a shared repository, or a multi-tenant directory, scanning, loading, or saving follows it outside the registry root. A symlinked prompt or index then discloses the contents of arbitrary files, and writes truncate and overwrite the symlink target outside the root. The fix rejects symlinked prompt and index paths, re-verifies each resolved path stays within the registry root, and opens writes with O_NOFOLLOW.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your application uses DirectoryPromptRegistry on a prompt directory whose contents can be influenced by untrusted input.
Background info
banks is vulnerable to Path Traversal in versions 0.0.1 - 2.5.0.
How to fix this
Upgrade the banks library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.