CRITICAL🇵🇱 Wersja polska

CVE-2024-5182

CVSS 9.1v3.1pub. 2024-06-20upd. 2024-11-21

A path traversal vulnerability exists in mudler/localai version 2.14.0, where an attacker can exploit the `model` parameter during the model deletion process to delete arbitrary files. Specifically, by crafting a request with a manipulated `model` parameter, an attacker can traverse the directory structure and target files outside of the intended directory, leading to the deletion of sensitive data. This vulnerability is due to insufficient input validation and sanitization of the `model` parameter.

🤖 AI Analysis
How it works

The vulnerability results from insufficient validation and sanitization of the `model` parameter used in the model deletion process. An attacker can craft an HTTP request containing a manipulated `model` parameter with path traversal sequences (e.g., `../../`), which causes the operation to escape the intended directory. As a result, the deletion mechanism operates on files outside the allowed working directory, enabling deletion of arbitrary files accessible to the application process.

Impact

An attacker can permanently delete arbitrary files on the server accessible to the application process, including configuration files, user data, or critical system files, leading to data integrity loss and potential service unavailability.

Mitigation & patch

LocalAI should be updated to a version containing the patch available in commit 1a3dedece06cab1acc3332055d285ac540a47f0e in the GitHub repository. Details available at: https://github.com/mudler/localai/commit/1a3dedece06cab1acc3332055d285ac540a47f0e

Who is affected

mudler/LocalAI version 2.14.0

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
  • Mudler Localai

    APP
    Mudler
    < 2.16.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2024-6868CRITICAL9.8PL ✓same product

Podatność tarslip w LocalAI umożliwiająca RCE przez arbitralny zapis pliku

CVE-2024-5181CRITICAL9.8PL ✓same product

Command injection w LocalAI — pełne przejęcie systemu przez parametr backend

CVE-2024-2029CRITICAL9.8PL ✓same product

Command injection w mudler/LocalAI — endpoint transkrypcji audio

CVE-2024-6983HIGH8.8same product

mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the loc...

CVE-2024-9900MEDIUM6.1same product

mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality...