Skip to content
Threat Feed
Subscribe

Vendor

DSPy

1 brief RSS
high advisory

Arbitrary File Exfiltration in DSPy Image and Audio Adapters (CVE-2026-72742)

DSPy version 3.3.0b1 is vulnerable to arbitrary local file exfiltration via path traversal in its Image and Audio field adapters, allowing an attacker to read and transmit sensitive file contents.

DSPy exfiltration library-vulnerability
1t 1c