CVE-2024-6868

CVSS V2 None CVSS V3 None

Description

mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive extraction. When model configurations specify additional files as archives (e.g., .tar), these archives are automatically extracted after downloading. This behavior can be exploited to perform a 'tarslip' attack, allowing files to be written to arbitrary locations on the server, bypassing checks that normally restrict files to the models directory. This vulnerability can lead to remote code execution (RCE) by overwriting backend assets used by the server.

Overview

CVE ID
CVE-2024-6868

Assigner
@huntr_ai

Vulnerability Status
PUBLISHED

Published Version
2024-10-29T12:46:54.732Z

Last Modified Date
2024-10-29T13:33:58.219Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://huntr.com/bounties/752d2376-2d9a-4e17-b462-3c267f9dd229
https://github.com/mudler/localai/commit/a181dd0ebc5d3092fc50f61674d552604fe8ef9c

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-6868
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6868

History

Created	Old Value	New Value	Data Type	Notes
2024-10-30 13:32:53				Added to TrackCVE