CVE-2024-8769
Arbitrary File Deletion via Relative Path Traversal in aimhubio/aim
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Arbitrary File Deletion via Relative Path Traversal in aimhubio/aim
A vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file deletion through relative path traversal. The `run_hash` parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. This vulnerability is exposed through the `Repo._close_run()` method, which is accessible via the tracking server instruction API. As a result, an attacker can exploit this to delete any arbitrary file on the machine running the tracking server.
Reserved 2024-09-12 | Published 2025-03-20 | Updated 2025-03-20 | Assigner @huntr_aiCWE-29 Path Traversal: '\..\filename'
huntr.com/bounties/59d3472f-f581-4beb-a090-afd36a00ecf7
Support options
