https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:28:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-188951 EUVD-2026-188951 https://cve.radiocsirt.org/vuln/euvd-2026-188951 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47171 <p>Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for defacement. This does not affect `agnai.chat`, installations using S3-compatible storage, or self-hosting that is not publicly exposed. Version 1.0.330 fixes this vulnerability.</p> <p>Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for defacement. This does not affect `agnai.chat`, installations using S3-compatible storage, or self-hosting that is not publicly exposed. Version 1.0.330 fixes this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47171 https://cve.radiocsirt.org/vuln/ghsa-g54f-66mw-hv66 <p><strong>Affected:</strong> npm: agnai</p> <p>### Summary</p> <p>A vulnerability has been discovered in **Agnai** that permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for defacement.</p> <p>This does not affect:</p> <p>- agnai.chat - installations using S3-compatible storage - self-hosting that is not publicly exposed</p> <p>### CWE-35: Path Traversal</p> <p>https://cwe.mitre.org/data/definitions/35.html</p> <p>### CVSS4.0 - 2.3 Low</p> <p>CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N</p> <p>### Details</p> <p>This is a path traversal vulnerability. An attacker can exploit this vulnerability by sending a specially crafted request to the `editCharacter` handler https://github.com/agnaistic/agnai/blob/75abbd5b0f5e48ddecc805365cf1574d05ee1ce5/srv/api/character.ts#L140:</p> <p>```tsx POST /api/character/28cbe508-2fa9-4890-886e-61d73e22006c%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%61%70%70%2f%64%69%73%74%2f%64%61%6e%79%61%6e%67 HTTP/1.1 ```</p> <p>The path traversal character sequence makes it’s way into the `id` variable which is then string interpolated into `filename`.</p> <p>```jsx export async function entityUpload(kind: string, id: string, attachment?: Attachment) { if (!attachment) return const filename = `${kind}-${id}` return upload(attachment, filename) } ```</p> <p>https://github.com/agnaistic/agnai/blob/75abbd5b0f5e48ddecc805365cf1574d05ee1ce5/srv/api/upload.ts#L55</p> <p>No path normaliz…</p> <p><strong>Affected:</strong> npm: agnai</p> <p>### Summary</p> <p>A vulnerability has been discovered in **Agnai** that permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for defacement.</p> <p>This does not affect:</p> <p>- agnai.chat - installations using S3-compatible storage - self-hosting that is not publicly exposed</p> <p>### CWE-35: Path Traversal</p> <p>https://cwe.mitre.org/data/definitions/35.html</p> <p>### CVSS4.0 - 2.3 Low</p> <p>CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N</p> <p>### Details</p> <p>This is a path traversal vulnerability. An attacker can exploit this vulnerability by sending a specially crafted request to the `editCharacter` handler https://github.com/agnaistic/agnai/blob/75abbd5b0f5e48ddecc805365cf1574d05ee1ce5/srv/api/character.ts#L140:</p> <p>```tsx POST /api/character/28cbe508-2fa9-4890-886e-61d73e22006c%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%61%70%70%2f%64%69%73%74%2f%64%61%6e%79%61%6e%67 HTTP/1.1 ```</p> <p>The path traversal character sequence makes it’s way into the `id` variable which is then string interpolated into `filename`.</p> <p>```jsx export async function entityUpload(kind: string, id: string, attachment?: Attachment) { if (!attachment) return const filename = `${kind}-${id}` return upload(attachment, filename) } ```</p> <p>https://github.com/agnaistic/agnai/blob/75abbd5b0f5e48ddecc805365cf1574d05ee1ce5/srv/api/upload.ts#L55</p> <p>No path normaliz…</p> https://cve.radiocsirt.org/vuln/ghsa-g54f-66mw-hv66