CVE-2026-22665 - Vulnerability Analysis

Overview

prompts.chat prior to commit 1464475 contains an identity confusion vulnerability caused by inconsistent case-sensitive and case-insensitive handling of usernames across write and read paths, letting attackers impersonate victim accounts and inject malicious content, exploit requires creating case-variant usernames.

Severity & Score

Impact

Attackers can impersonate users, replace profile content, and inject malicious metadata, compromising platform integrity and user trust.

Mitigation

Update to commit 1464475 or later.

References

• https://github.com/f/prompts.chat/commit/1464475df2698fb7ccd0cdbc382b0750466f891d
• https://github.com/f/prompts.chat/pull/1098
• https://www.vulncheck.com/advisories/prompts-chat-identity-confusion-via-case-sensitive-username-handling

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner