CVE-2024-6085

Advisory

Affected versions of the lollms package are vulnerable to Path Traversal due to an unauthenticated root folder settings change in the XTTS server. The XTTS server’s configuration endpoint allows modification of the root folder to “/” without authentication, bypassing protective checks in the read file endpoint and enabling directory traversal through both file reading and output directory manipulation. A remote attacker can exploit this by changing the root folder via an unauthenticated request, resulting in arbitrary file access and the ability to write audio files to any location on the system, compromising confidentiality and integrity.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-9chm-m6x2-6fvc
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6085