PT-2024-37915 · Unknown · Mudler/Localai

Published 2024-10-29 · Updated 2024-11-13 · CVE-2024-6868

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mudler/LocalAI version 2.17.1

Description The issue arises from improper handling of automatic archive extraction in model configurations. When archives (e.g., .tar) are specified, they are automatically extracted after downloading, potentially allowing for a 'tarslip' attack. This can enable writing files to arbitrary server locations, bypassing normal restrictions to the models directory. The issue can lead to remote code execution (RCE) by overwriting backend assets.

Recommendations For mudler/LocalAI version 2.17.1, consider disabling automatic archive extraction until a patch is available to prevent potential exploitation. Restrict access to model configurations that specify additional files as archives to minimize the risk of arbitrary file writes.

Exploit

Fix

Link Following

RCE

Weakness Enumeration

CWE-59

CWE-20

Related Identifiers

CVE-2024-6868

Affected Products

Mudler/Localai

References · 5

• 🔥 https://huntr.com/bounties/752d2376-2d9a-4e17-b462-3c267f9dd229 · Exploit
• https://github.com/mudler/localai/commit/a181dd0ebc5d3092fc50f61674d552604fe8ef9c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-6868 · Security Note
• https://osv.dev/vulnerability/CVE-2024-6868 · Vendor Advisory
• https://t.me/cvedetector/9324 · Telegram Post