Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v6qv-c78w-ff25

Опубликовано: 27 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the localai backend receives inputs not only from the configuration file but also from other inputs, allowing an attacker to upload a binary file and execute malicious code. This can lead to the attacker gaining full control over the system.

mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the localai backend receives inputs not only from the configuration file but also from other inputs, allowing an attacker to upload a binary file and execute malicious code. This can lead to the attacker gaining full control over the system.

EPSS

Процентиль: 89%
0.04875
Низкий

8.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the localai backend receives inputs not only from the configuration file but also from other inputs, allowing an attacker to upload a binary file and execute malicious code. This can lead to the attacker gaining full control over the system.

EPSS

Процентиль: 89%
0.04875
Низкий

8.8 High

CVSS3

Дефекты

CWE-94