CVE-2024-6868 - CVE House
Back to Database
Status published High CVE-2024-6868

Arbitrary File Write in mudler/LocalAI

Vulnerability Description

mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive extraction. When model configurations specify additional files as archives (e.g., .tar), these archives are automatically extracted after downloading. This behavior can be exploited to perform a 'tarslip' attack, allowing files to be written to arbitrary locations on the server, bypassing checks that normally restrict files to the models directory. This vulnerability can lead to remote code execution (RCE) by overwriting backend assets used by the server.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-6868

Credits & Attribution

No credits recorded in the NVD database.

References

More from mudler

View All →
CVE-2024-9900
Cross-Site Scripting (XSS) in mudler/localai
Medium 5.4
CVE-2024-7010
Timing Attack in mudler/localai
High 7.5
CVE-2024-6983
Remote Code Execution in mudler/localai
High 8.8
CVE-2024-6095
SSRF and Partial LFI in /models/apply Endpoint in mudler/localai
Medium 5.8
CVE-2024-5616
CSRF Vulnerability in mudler/LocalAI
Medium 4.3

Affected Vendor

Affected Software

mudler/localai
Vulnerable Versions:
unspecified

Timeline

Official Publish: October 29th, 2024
Last Modified: October 15th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)

CWE-59

MITRE ATT&CK TTPs

T1574 Hijack Execution Flow
Privilege Escalation
T1222 File and Directory Permissions Modification
Defense Evasion
T1005 Data from Local System
Collection
T1565 Data Manipulation
Impact
T1078 Valid Accounts
Persistence