PT-2024-28404 · Hugging Face · Huggingface/Text-Generation-Inference

Published 2024-05-30 · Updated 2024-06-02 · CVE-2024-3924

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions huggingface/text-generation-inference versions up to and including v2.0.0

Description A code injection issue exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The issue arises from the insecure handling of the github.head ref user input, which is used to dynamically construct a command for installing a software package. An attacker can exploit this by forking the repository, creating a branch with a malicious payload as the name, and then opening a pull request to the base repository. Successful exploitation could lead to arbitrary code execution within the context of the GitHub Actions runner.

Recommendations For versions up to and including v2.0.0, update to version 2.0.0 to resolve the issue. As a temporary workaround, consider restricting access to the autodocs.yml workflow file to minimize the risk of exploitation. Avoid using the github.head ref input in the affected workflow file until the issue is resolved.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-3924

GHSA-QQ99-P57R-G3V7

Affected Products

Huggingface/Text-Generation-Inference

References · 7

• https://osv.dev/vulnerability/GHSA-qq99-p57r-g3v7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-3924 · Security Note
• https://osv.dev/vulnerability/CVE-2024-3924 · Vendor Advisory
• https://github.com/huggingface/text-generation-inference/commit/88702d876383f7200eccf67e28ba00500dc804bb · Note
• https://github.com/huggingface/text-generation-inference · Note
• https://t.me/cvenotify/81549 · Telegram Post
• https://huntr.com/bounties/8af92fc2-0103-4d29-bb28-c3893154c422 · Note