---
id: CVE-2026-22664
title: >-
  prompts.chat prior to commit 30a8f04 contains a server-side request forgery
  vulnerability in the Fal.ai media status polling feature that allows
  authenticated users to perform arbitrary outbound requests by supplying
  attacker-controlled …
summary: >-
  prompts.chat prior to commit 30a8f04 contains a server-side request forgery
  vulnerability in the Fal.ai media status polling feature that allows
  authenticated users to perform arbitrary outbound requests by supplying
  attacker-controlled …
severity: high
cvss: 7.7
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N'
cwe:
  - CWE-918
vendor: fka
product: prompts.chat
affected:
  - prompts.chat < 2026-03-25
patched:
  - prompts.chat 2026-03-25
published: '2026-04-03'
updated: '2026-07-24'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-22664'
references:
  - url: 'https://gist.github.com/mdisec/27c0cac0ec6a8f3c8f85a18987ddb942'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/f/prompts.chat/commit/30a8f0470e0ba45e6be9c9f55220f4a9a6b91c99
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/prompts-chat-ssrf-via-fal-ai-media-status-polling
    label: disclosure@vulncheck.com
  - url: 'https://gist.github.com/mdisec/27c0cac0ec6a8f3c8f85a18987ddb942'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00301
epssPercentile: 0.20284
ingestedAt: '2026-07-25T22:05:04.721Z'
---

## Overview

prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media status polling feature that allows authenticated users to perform arbitrary outbound requests by supplying attacker-controlled URLs in the token parameter. Attackers can exploit the lack of URL validation to disclose the FAL_API_KEY in the Authorization header, enabling credential theft, internal network probing, and abuse of the victim's Fal.ai account.

## Affected

- `prompts.chat < 2026-03-25`

## Remediation

Upgrade past the affected range:

- `prompts.chat 2026-03-25`