CVE-2026-72742: DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attacke

DSPy 3.3.0b1 has a vulnerability where attackers can trick the AI into reading files from a computer and sending them to an attacker-controlled server. The vulnerability exists in the Image and Audio output adapters, which process untrusted outputs from language models (the AI's responses) without proper safety checks, allowing an attacker to inject a file path that the system then reads and encodes into messages.