CVE-2026-22665

CVE-2026-22665 is an identity confusion vulnerability affecting prompts.chat prior to commit 1464475, caused by inconsistent case-sensitive and case-insensitive username handling. This flaw allows attackers to create case-variant usernames, bypassing uniqueness checks and enabling impersonation of victim accounts, replacement of profile content, and injection of malicious data. Rated 8.1 HIGH on the CVSS scale, it presents a network attack vector with low complexity and requires low privileges, leading to high confidentiality and integrity impacts. There is currently no evidence of active exploitation, no public exploit code available, and it has received minimal community attention.