CVE-2024-7957 Arbitrary File Overwrite in danswer-ai/danswer
Attackers can overwrite arbitrary files via path traversal in the ZulipConnector, potentially leading to code execution or data modification.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-7957?
CVE-2024-7957 is a critical path traversal vulnerability in danswer-ai/danswer, published on 20 Mar 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerability arises from the load_credentials method, where user-controlled input for realm_name and zuliprc_content is used to construct file paths and write file contents. This allows attackers to overwrite or create arbitrary files if a zuliprc- directory already exists in the temporary directory.
Weakness: CWE-29
Which versions are affected by CVE-2024-7957?
How do I fix CVE-2024-7957?
No fix has been published for CVE-2024-7957 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-7957 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-7957 exists.
Sources
Also known as GHSA-q6gg-j289-2hm4.