CVE-2024-6868: falha de alta gravidade em mudler/localai
Arbitrary File Write in mudler/LocalAI
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.1epss 1.5%
mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive extraction. When model configurations specify additional files as archives (e.g., .tar), these archives are automatically extracted after downloading. This behavior can be exploited to perform a 'tarslip' attack, allowing files to be written to arbitrary locations on the server, bypassing checks that normally restrict files to the models directory. This vulnerability can lead to remote code execution (RCE) by overwriting backend assets used by the server.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Produtos afetados
mudler · mudler/localaiCVEs relacionadas — mudler/localai
No mesmo produto, das mais perigosas para as menos.
CVE-2024-5182HIGHPath Traversal in mudler/localaiEPSS 25.5%CVE-2024-2029CRITICALCommand Injection in mudler/localaiEPSS 2.9%CVE-2024-5181CRITICALCommand Injection in mudler/localaiEPSS 2.7%CVE-2024-6095MEDIUMSSRF and Partial LFI in /models/apply Endpoint in mudler/localaiEPSS 2.6%CVE-2024-6983HIGHRemote Code Execution in mudler/localaiEPSS 1.3%CVE-2024-9900MEDIUMCross-Site Scripting (XSS) in mudler/localaiEPSS 0.5%