| शीर्षक | griptape v0.19.4 Absolute Path Traversal |
|---|
| विवरण | The ComputerTool in Griptape allows agents to execute Python code by first writing the code to a file in a local working directory, which is then mounted into a container for execution. However, the filename parameter, which determines where the code is stored locally, is generated by the LLM and is not properly validated or sanitized. This lack of validation allows for a path traversal vulnerability. An attacker can use prompt injection to coerce the LLM into specifying a filename containing directory traversal sequences (e.g., ../../malicious_file). Since the file content (the code) is also controllable via prompt injection, writing to sensitive files like __init__.py or ~/.bashrc may lead to Remote Code Execution (RCE) on the host system. |
|---|
| स्रोत | ⚠️ https://github.com/Ka7arotto/cve/blob/main/griptape/SaveCodeTool/computeTool.md |
|---|
| उपयोगकर्ता | Goku (UID 80486) |
|---|
| सबमिशन | 21/03/2026 03:05 AM (7 महीनों पहले) |
|---|
| संयम | 05/04/2026 07:17 AM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 355391 [griptape-ai griptape 0.19.4 ComputerTool tool.py filename निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|