by Kastro
Paper/Archive/CVE-2024-6868

CVE-2024-6868

mudler mudler/localai — Arbitrary File Write in mudler/LocalAI

EPSS 2%public exploitCVSS 9.8
critical.is priorityof 100
54
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 75.0.750 × 2015.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive extraction. When model configurations specify additional files as archives (e.g., .tar), these archives are automatically extracted after downloading. This behavior can be exploited to perform a 'tarslip' attack, allowing files to be written to arbitrary locations on the server, bypassing checks that normally restrict files to the models directory. This vulnerability can lead to remote code execution (RCE) by overwriting backend assets used by the server.

Affected

ProductAffectedFixed inSource
mudler/localaiunspecified – < 2.18.12.18.1CNA
localai< 2.18.12.18.1CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
@huntr_ai (CNA)8.1CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refhuntr.com/bounties/752d2376-2d9a-4e17-b462-3c267f9dd229refgithub.com/mudler/localai/commit/a181dd0ebc5d3092fc50f61674d552604fe8ef9c