Lokale Datei-Inklusion in haotian-liu/llava

The impact of this vulnerability is significant due to the potential for arbitrary file access. An attacker could leverage this LFI to read configuration files containing credentials, source code exposing intellectual property, or other sensitive data. Depending on the system's configuration and permissions, an attacker might be able to escalate privileges or gain further access to the underlying infrastructure. While not directly leading to remote code execution, the information gained from file access could be used to identify and exploit other vulnerabilities. This vulnerability shares similarities with other LFI exploits where attackers use path traversal techniques to bypass security controls.

Users deploying LLaVA for research or experimentation, particularly those using the gradio web UI for interactive demonstrations, are at risk. Shared hosting environments where LLaVA is deployed alongside other applications are also vulnerable, as a successful exploit could potentially compromise the entire host.

• python / server:

import os
import requests

# Target URL
url = "http://your-llava-server/gradio_app"

# Attempt to read a sensitive file
file_to_read = "/etc/passwd"

# Craft the request
params = {'file': file_to_read}

# Send the request
response = requests.get(url, params=params)

# Check the response
if response.status_code == 200:
    print(f"File content: {response.text}")
else:
    print(f"Request failed with status code: {response.status_code}")

• linux / server:

# Monitor access logs for suspicious file requests
grep -i "/etc/passwd" /var/log/apache2/access.log

1. 2025-03-20Disclosure

   disclosure

1. Reserviert2024-12-02
2. Veröffentlicht2025-03-20
3. Geändert2025-10-15
4. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-12065 is to apply the vendor-provided fix, which involves implementing proper input validation within the gradio web UI component. Until a fix is available, consider restricting file access permissions to the LLaVA application. Implement a Web Application Firewall (WAF) with rules to block suspicious path traversal attempts (e.g., '../' sequences). Monitor access logs for unusual file requests and implement intrusion detection signatures to identify potential exploitation attempts. After applying the fix, confirm by attempting to access a non-existent file through the gradio UI and verifying that access is denied.