CVE-2026-22662 is a CWE-918 SSRF vulnerability affecting prompts.chat before commit 1464475. The flaw exists in the Wiro media generator, where authenticated users can supply arbitrary URLs via the inputImageUrl parameter in POST requests to /api/media-generate. This enables blind SSRF attacks, allowing internal network probing and data exfiltration through the upstream service without direct response visibility. The vulnerability requires authentication but has low attack complexity and no user interaction needed. No vendor advisory or patch information is currently available.

An attacker with valid authentication can leverage this SSRF vulnerability to make server-side requests to internal or protected network resources. This may lead to unauthorized access to internal services, network reconnaissance, or data exfiltration via the upstream Wiro service. Since the response bodies are not directly returned, the exploitation is blind, potentially limiting the attacker's ability to fully interact with internal systems. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict authenticated user permissions to trusted individuals only and monitor for suspicious POST requests to the /api/media-generate endpoint. Avoid exposing sensitive internal services accessible from the prompts.chat server to reduce potential impact.