CVE-2024-6868highCWE-59

CVE-2024-6868: high-severity vulnerability in mudler/localai

Arbitrary File Write in mudler/LocalAI

Published · Updated

Follow this CVE+ Monitor mudler/localai

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 1.5%
mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive extraction. When model configurations specify additional files as archives (e.g., .tar), these archives are automatically extracted after downloading. This behavior can be exploited to perform a 'tarslip' attack, allowing files to be written to arbitrary locations on the server, bypassing checks that normally restrict files to the models directory. This vulnerability can lead to remote code execution (RCE) by overwriting backend assets used by the server.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Affected products
mudler · mudler/localai
Related CVEs — mudler/localai

In the same product, most dangerous first.

CVE-2024-5182HIGHPath Traversal in mudler/localaiEPSS 25.5%CVE-2024-2029CRITICALCommand Injection in mudler/localaiEPSS 2.9%CVE-2024-5181CRITICALCommand Injection in mudler/localaiEPSS 2.7%CVE-2024-6095MEDIUMSSRF and Partial LFI in /models/apply Endpoint in mudler/localaiEPSS 2.6%CVE-2024-6983HIGHRemote Code Execution in mudler/localaiEPSS 1.3%CVE-2024-9900MEDIUMCross-Site Scripting (XSS) in mudler/localaiEPSS 0.5%