| عنوان | houtini-ai houtini-lm <=2.13.2 Arbitrary Local File Read |
|---|
| الوصف | houtini-lm contains an arbitrary local file read vulnerability in the code_task_files tool. The tool rejects relative paths but accepts caller-controlled absolute paths and reads any file accessible to the server process without restricting the resolved path to an intended working directory or other trusted root.
The contents of the selected files are included in requests sent to the configured LLM endpoint. When houtini-lm is configured with OpenRouter or another remotely hosted OpenAI-compatible provider, an attacker able to invoke the tool can cause sensitive local files, such as SSH keys, environment files, or cloud credentials, to be transmitted off the host.
The vulnerability may be exploited by a malicious MCP client or through prompt injection against an MCP-enabled agent. The proposed fix confines canonicalized paths to an operator-configurable allowlist of roots and rejects symbolic links that resolve outside those roots. |
|---|
| المصدر | ⚠️ https://github.com/houtini-ai/houtini-lm/pull/11 |
|---|
| المستخدم | Mcfly_Zhang (UID 98877) |
|---|
| ارسال | 13/07/2026 12:33 AM (2 أشهر منذ) |
|---|
| الاعتدال | 28/08/2026 07:25 AM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 396503 [houtini-ai houtini-lm حتى 2.13.2 code_task_files src/index.ts اجتياز الدليل] |
|---|
| النقاط | 20 |
|---|