CyberSecBulletin

Stanford NLP vulnerabilities

We track 1 vulnerability in Stanford NLP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.

1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score

Latest Stanford NLP vulnerabilities

  • 8.6 High severity

    DSPy: External Control of File Name or Path

    CVE-2026-72742Stanford NLP

    DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Im