CVE-2026-22662 is a CWE-918 SSRF vulnerability affecting prompts.chat before commit 1464475. The flaw exists in the Wiro media generator component, where authenticated users can submit POST requests to the /api/media-generate endpoint with a crafted inputImageUrl parameter. This enables blind SSRF attacks, allowing attackers to probe internal networks, access internal services, and exfiltrate data through the upstream Wiro service. The vulnerability does not provide direct response bodies, making it a blind SSRF. No official remediation or patch is currently documented.

An attacker with authentication can leverage this SSRF vulnerability to perform unauthorized server-side requests to internal network resources and services. This may lead to information disclosure or data exfiltration via the Wiro service. The blind nature of the SSRF means attackers do not receive direct response content, potentially limiting the scope but still enabling internal network reconnaissance and indirect data leaks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the /api/media-generate endpoint to trusted users only and monitor for suspicious POST requests with user-controlled URLs. Consider implementing network-level controls to limit server-side outbound requests from the application server.