Detections
Analytics

SCA: security update for banks (GHSA-64vx-6h2c-rjh7)

high Tenable Cloud Security Plugin ID 478565

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.3, banks
 parses Tool JSON objects from the rendered body of {% completion %} blocks and later resolves their
 import_path field through importlib.import_module(...) + getattr(...) to obtain the callable that handles
 a tool call. There is no allowlist or sanitization on import_path, so any importable Python attribute
 (e.g. os.system, subprocess.getoutput) can be selected. When the LLM emits a tool_calls entry whose
 function.name matches the attacker-supplied tool name, the resolved callable is invoked with kwargs
 decoded from tool_call.function.arguments, yielding arbitrary code execution in the banks-hosting process.
 This is distinct from GHSA-gphh-9q3h-jgpp / CVE-2026-44209. That advisory was fixed in 2.4.2 by switching
 src/banks/env.py from Environment to SandboxedEnvironment. The fix does not touch
 src/banks/extensions/completion.py, and the unsafe import + getattr chain still executes on 2.4.2. The
 malicious Tool JSON is plain text in the rendered template body — it requires no Jinja attribute access,
 so the sandbox is irrelevant. This issue has been fixed in version 2.4.3. (CVE-2026-61536)

Solution

Update the banks library and its related packages to version 2.4.3 or later.

See Also

https://github.com/advisories/GHSA-64vx-6h2c-rjh7

Plugin Details

Severity: High

ID: 478565

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 11/5/2026

Updated: 11/5/2026

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.3

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 7.1

Temporal Score: 5.3

Vector: CVSS2#AV:N/AC:H/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-61536

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 11/5/2026

Vulnerability Publication Date: 7/30/2026

Reference Information

CVE: CVE-2026-61536