PromtEngineer vulnerabilities
We track 3 vulnerabilities in PromtEngineer products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2026.
Latest PromtEngineer vulnerabilities
- 7.3 High severity
localGPT: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The impacted element is the function _route_using_overviews of the file backend/server.py of the component LLM Prompt Handler. Such manipulation leads to i
- 7.3 High severity
localGPT: Improper Access Control
A flaw has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The affected element is the function do_POST of the file backend/server.py. This manipulation causes unrestricted upload. The attack is possible to be carried out r
- 7.3 High severity
localGPT: Improper Authentication
A vulnerability was detected in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. Impacted is the function LocalGPTHandler of the file backend/server.py of the component API Endpoint. The manipulation of the argument BaseHTTPRequestHandler