PatchTheCVEfka vulnerabilities
Recent CVEs affecting fka products. 5 tracked.
fka has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-04-03. Highest priority: CVE-2026-22665 (score 40/100).
- CVE-2026-22665 HIGH 8.1 UPGRADE prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-se
- CVE-2026-22664 HIGH 7.7 UPGRADE prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media
- CVE-2026-22661 HIGH 8.1 UPGRADE prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allow
- CVE-2026-22663 HIGH 7.5 UPGRADE prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isP
- CVE-2026-22662 MEDIUM 4.3 UPGRADE prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro me
FAQ
How do I fix fka vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fka being exploited right now?
None of the tracked fka CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fka CVE should I patch first?
CVE-2026-22665 currently ranks highest (40/100): prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-se.