CVE-2026-72742: DSPy file exfiltration through Image and Audio output field adapters

Summary

DSPy 3.3.0b1 has a file exfiltration flaw in its Image and Audio output field adapters. An attacker who can influence language model output can inject a filesystem path into the url field of a parsed Image or Audio typed output, and the JSONAdapter and ChatAdapter then read and base64-encode that local file through encode_image or encode_audio in image.py and audio.py. The file contents are embedded in outgoing prompt messages sent to an attacker-controlled model endpoint.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• InfoMicrosoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 NeuronsSimilar attack · The Hacker News
• HighCVE-2026-63651: LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect…Similar attack · NVD/CVE Database
• HighCVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationSimilar attack · AWS Security Bulletins
• InfoLocation Matters: Sparse Latent-Variance Attacks for Face Privacy against Diffusion PersonalizationSimilar attack · Arxiv (cs.RO + cs.CV security)
• MediumCVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure VulnerabilitySimilar attack · MSRC Security Update Guide