CVE-2026-73299 microsoft CVE debrief

Who should care

Defenders responsible for Node.js systems using Prompty should assess exposure and take steps to verify and mitigate potential vulnerabilities. This includes reviewing system inventories, checking for affected versions, and applying patches or mitigations as available. Additionally, defenders should monitor for potential exploitation attempts and review compensating controls for exposed systems.

Why it matters

CVE-2026-73299 is a critical vulnerability in Prompty that allows execution of attacker-controlled JavaScript in Node.js processes. Defenders should assess exposure, verify affected versions, and apply patches or mitigations.

• Potential code execution in Node.js processes
• Possible traversal of constructor and prototype properties
• Execution of attacker-controlled JavaScript
• Verification of Prompty version and patching

Technical summary

The TypeScript Nunjucks renderer in Prompty evaluates untrusted .prompty template bodies with unrestricted JavaScript member access, allowing an attacker-controlled template to traverse constructor and prototype properties to execute JavaScript in the host Node.js process. This vulnerability affects Prompty versions prior to 0.1.5 and 2.0.0-beta.5, and defenders should assess exposure and apply patches or mitigations as available. The vulnerability allows for potential code execution in Node.js processes and possible traversal of constructor and prototype properties.

Defensive priority

Defenders should prioritize assessing exposure and verifying if their systems use affected versions of Prompty, and apply patches or mitigations as available.

Recommended defensive actions

• Assess exposure by checking if systems use affected versions of Prompty
• Verify if patches or mitigations are available and apply them
• Monitor for potential exploitation attempts
• Review and update inventory of Prompty installations
• Perform thorough vulnerability scanning
• Implement compensating controls for exposed systems
• Track and document remediation progress

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in Prompty, a markdown file format for LLM prompts, affecting versions prior to 0.1.5 and 2.0.0-beta.5. The TypeScript Nunjucks renderer evaluates untrusted .prompty template bodies with unrestricted JavaScript member access. Defenders should verify affected versions, assess exposure, and apply patches or mitigations. Evidence is limited to public CVE and NVD records, and further verification is needed to confirm affected scope and severity.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.