CVE-2024-5182 Path Traversal in mudler/localai

What is CVE-2024-5182?

CVE-2024-5182 is a high-severity path traversal vulnerability in mudler/localai, published on 19 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A path traversal vulnerability exists in mudler/localai version 2.14.0, where an attacker can exploit the `model` parameter during the model deletion process to delete arbitrary files. Specifically, by crafting a request with a manipulated `model` parameter, an attacker can traverse the directory structure and target files outside of the intended directory, leading to the deletion of sensitive data. This vulnerability is due to insufficient input validation and sanitization of the `model` parameter.

Weakness: CWE-22

Which versions are affected by CVE-2024-5182?

3 open source packages ship an affected version, including github.com/go-skynet/LocalAI. It affects 1 product.

Products include Mudler Localai.

How do I fix CVE-2024-5182?

Upgrade github.com/go-skynet/LocalAI to 2.16.0 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2024-5182 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-5182 exists.

Other vulnerabilities in mudler/localai

• CVE-2024-5181 Command Injection in mudler/localai Critical 9.8
• CVE-2024-2029 Command Injection in mudler/localai Critical 9.8
• CVE-2024-6983 Remote Code Execution in mudler/localai High 8.8
• CVE-2024-6868 Arbitrary File Write in mudler/LocalAI High 8.1
• CVE-2024-7010 Timing Attack in mudler/localai High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-cpcx-r2gq-x893, GO-2024-2938.