| タイトル | houtini-ai houtini-lm <=2.13.2 Arbitrary Local File Read |
|---|
| 説明 | houtini-lm contains an arbitrary local file read vulnerability in the code_task_files tool. The tool rejects relative paths but accepts caller-controlled absolute paths and reads any file accessible to the server process without restricting the resolved path to an intended working directory or other trusted root.
The contents of the selected files are included in requests sent to the configured LLM endpoint. When houtini-lm is configured with OpenRouter or another remotely hosted OpenAI-compatible provider, an attacker able to invoke the tool can cause sensitive local files, such as SSH keys, environment files, or cloud credentials, to be transmitted off the host.
The vulnerability may be exploited by a malicious MCP client or through prompt injection against an MCP-enabled agent. The proposed fix confines canonicalized paths to an operator-configurable allowlist of roots and rejects symbolic links that resolve outside those roots. |
|---|
| ソース | ⚠️ https://github.com/houtini-ai/houtini-lm/pull/11 |
|---|
| ユーザー | Mcfly_Zhang (UID 98877) |
|---|
| 送信 | 2026年07月13日 00:33 (2 月 ago) |
|---|
| モデレーション | 2026年08月28日 07:25 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 396503 [houtini-ai houtini-lm 迄 2.13.2 code_task_files src/index.ts ディレクトリトラバーサル] |
|---|
| ポイント | 20 |
|---|