CRITICAL🇵🇱 Wersja polska

CVE-2024-8769

CVSS 9.1v3.1pub. 2025-03-20upd. 2025-10-15

A vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file deletion through relative path traversal. The `run_hash` parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. This vulnerability is exposed through the `Repo._close_run()` method, which is accessible via the tracking server instruction API. As a result, an attacker can exploit this to delete any arbitrary file on the machine running the tracking server.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Aimstack Aim

    APP
    Aimstack
    < 3.24.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2024-7760CRITICAL9.6PL ✓ten sam produkt

CSRF w Aimstack Aim — łańcuch podatności z RCE i DoS

CVE-2024-6829CRITICAL9.1PL ✓ten sam produkt

Path traversal w Aimstack Aim – zapis plików w dowolnej lokalizacji serwera

CVE-2024-6396CRITICAL9.8PL ✓ten sam produkt

Nadpisywanie plików i RCE w Aimstack Aim przez funkcję _backup_run

CVE-2024-2195CRITICAL9.8PL ✓ten sam produkt

RCE w Aimstack Aim – wykonanie kodu przez parametr query w API

CVE-2025-51463HIGH7.0ten sam produkt

Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the s...