CVE-2024-36858 Scanner

The open-source AI assistant platform Jan, specifically version v0.4.12, contains a critical vulnerability that allows unauthenticated arbitrary file uploads via the /v1/app/writeFileSync endpoint.

Identified as CVE-2024-36858, this flaw enables attackers to write files to arbitrary paths by abusing improper path sanitization. It also allows file content manipulation using the appendFileSync and readFileSync endpoints.

By chaining these APIs, a remote attacker can place and execute arbitrary code on the system. This leads to a full system compromise, data exfiltration, and potential lateral movement within the host network.

REFERENCES

• https://github.com/HackAllSec/CVEs/blob/main/Jan%20AFR%20vulnerability/README.md