CVE-2024-2029

The `audioToWav` function responsible for converting audio files to WAV format passes the filename provided by the user directly to the shell command invoking ffmpeg, without any validation or sanitization. An attacker can craft a malicious filename containing additional system commands (e.g., using shell special characters), which will be executed in the context of the server process. No authentication or user interaction is required.

Successful exploitation of the vulnerability allows an attacker to execute arbitrary commands on the server hosting LocalAI, which may lead to unauthorized data access, disclosure of sensitive information, system takeover, or other damage depending on process privileges.

mudler/LocalAI should be updated to a version containing commit 31a4c9c9d3abc58de2bdc5305419181c8b33eb1c, which introduces proper sanitization of filenames passed to ffmpeg. Details are available in the vendor references on GitHub and in the report on the huntr.com platform.

Product mudler/LocalAI — versions indicated in vendor references (patched commit: 31a4c9c9d3abc58de2bdc5305419181c8b33eb1c)