CVE-2024-4841 Scanner

The LoLLMS WebUI is a user interface for the LoLLMS system, utilized widely by data scientists and machine learning professionals for model management and training configuration. The application is an open-source solution primarily for local deployment, offering a highly customizable and extendable environment for AI/ML workflows. Commonly adopted in research institutions and tech startups, LoLLMS WebUI supports integration with multiple model libraries. The software enables direct manipulation of models and resources, often in research-driven environments where secure data handling is critical.

This Path Traversal vulnerability allows unauthorized access to file and folder structures on systems running LoLLMS WebUI. It stems from insufficient input sanitization in the application’s handling of path requests in the HTTP endpoint '/add_reference_to_local_model'. Exploiting this flaw enables attackers to predict and access specific subfolders and files within the system’s file hierarchy. This vulnerability is significant, as it compromises local file confidentiality and could expose sensitive information.

The issue lies in the 'add_reference_to_local_model' endpoint, where a lack of input filtering in the 'path' parameter permits unintended directory traversal. Specifically, the endpoint accepts arbitrary paths in HTTP POST requests, which allows attackers to retrieve information about directory structures on the server. The endpoint’s response provides status feedback, revealing whether a path exists, enabling the attacker to map file systems effectively. Attackers may attempt to predict sensitive file locations or system directories by crafting varied requests, observing the feedback given by the server's JSON response to path validation.

Exploiting this vulnerability could allow malicious actors to map and access directories and files on the server, revealing sensitive or confidential information. Unauthorized access to system configurations or user data could lead to exposure of security policies, local credentials, or research data. A breach could disrupt system integrity and potentially serve as a stepping-stone for more sophisticated attacks or data exfiltration, significantly impacting data confidentiality.

S4E offers users a powerful Cyber Threat Exposure Management service to monitor and protect digital assets. By running security scans for vulnerabilities like this Path Traversal, you can ensure your systems remain protected from potential data breaches. With timely notifications and detailed reports, the S4E platform keeps you informed of security gaps in your assets, helping prioritize critical issues. Leveraging S4E’s expertise, you can confidently manage vulnerabilities and maintain a secure operational environment.

References:

• https://huntr.com/bounties/740dda3e-7104-4ccf-9ac4-8870e4d6d602
• https://nvd.nist.gov/vuln/detail/CVE-2024-4841