by Kastro
Paper/Archive/CVE-2024-2029

CVE-2024-2029

mudler mudler/localai — Command Injection in mudler/localai

EPSS 3%public exploitCVSS 9.8
critical.is priorityof 100
57
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 86.8.868 × 2017.4Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A command injection vulnerability exists in the `TranscriptEndpoint` of mudler/localai, specifically within the `audioToWav` function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of user-supplied filenames before passing them to ffmpeg via a shell command, allowing an attacker to execute arbitrary commands on the host system. Successful exploitation could lead to unauthorized access, data breaches, or other detrimental impacts, depending on the privileges of the process executing the code.

Affected

ProductAffectedFixed inSource
mudler/localaiunspecified – < v2.10.0v2.10.0CNA
localai< 2.10.02.10.0CISA-ADP

Scores by source

@huntr_ai (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refhuntr.com/bounties/e092528a-ce3b-4e66-9b98-3f56d6b276b0refgithub.com/mudler/localai/commit/31a4c9c9d3abc58de2bdc5305419181c8b33eb1c