AVID-2026-R1403

Description

Path Traversal leading to Arbitrary File Write and RCE in vertaai/modeldb (CVE-2024-1961)

Details

vertaai/modeldb is vulnerable to a path traversal attack due to improper sanitization of user-supplied file paths in its file upload functionality. Attackers can exploit this vulnerability to write arbitrary files anywhere in the file system by manipulating the ‘artifact_path’ parameter. This flaw can lead to Remote Code Execution (RCE) by overwriting critical files, such as the application’s configuration file, especially when the application is run outside of Docker. The vulnerability is present in the NFSController.java and NFSService.java components of the application.

Reason for inclusion in AVID: CVE-2024-1961 describes a path traversal vulnerability in vertaai/modeldb that allows arbitrary file write and remote code execution. This is a security vulnerability in an AI infrastructure component (model metadata store) used in ML pipelines. It affects software used to build/deploy/run general-purpose AI systems, constituting a software supply-chain risk for AI stacks. Evidence includes explicit description of path traversal, RCE, affected components, and CVSS details.

References

Affected or Relevant Artifacts

Developer: vertaai
Deployer: vertaai
Artifact Details:

Type	Name
System	vertaai/modeldb

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.0
Vector String	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score	8.8
Base Severity	🔴 High
Attack Vector	NETWORK
Attack Complexity	🟢 Low
Privileges Required	🟢 Low
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	🔴 High
Integrity Impact	🔴 High
Availability Impact	🔴 High

CWE

ID	Description
CWE-22	CWE-22 Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’)

Other information

Report Type: Advisory
Credits:
Date Reported: 2024-04-16
Version: 0.3.3
AVID Entry