CVE-2024-6868

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-6868

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6868.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-6868

Published

2024-10-29T12:46:54.732Z

Modified

2026-08-08T03:48:08.651680929Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

Arbitrary File Write in mudler/LocalAI

Details

mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive extraction. When model configurations specify additional files as archives (e.g., .tar), these archives are automatically extracted after downloading. This behavior can be exploited to perform a 'tarslip' attack, allowing files to be written to arbitrary locations on the server, bypassing checks that normally restrict files to the models directory. This vulnerability can lead to remote code execution (RCE) by overwriting backend assets used by the server.

Database specific

{
    "cna_assigner": "@huntr_ai",
    "cwe_ids": [
        "CWE-59"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6868.json"
}

References

Affected packages

Git / github.com/mudler/localai

Affected ranges

Type

GIT

Repo

https://github.com/mudler/localai

Events

Introduced

8142bdc48f3619eddc6344fa4ed83b331f7b37c2

Fixed

a181dd0ebc5d3092fc50f61674d552604fe8ef9c

Database specific

{
    "extracted_events": [
        {
            "introduced": "2.17.1"
        },
        {
            "last_affected": "2.17.1"
        }
    ],
    "cpe": "cpe:2.3:a:mudler:localai:2.17.1:*:*:*:*:*:*:*",
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

2.*

2.17.1

v2.*

v2.17.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6868.json"