CVE-2024-6829
📋 TL;DR
This vulnerability in aimhubio/aim allows attackers to exploit insecure tarfile extraction to write arbitrary files to arbitrary locations on the server. By controlling repo.path and run_hash parameters, attackers can bypass directory checks and potentially overwrite critical system files. This affects anyone running aim version 3.19.3 for remote tracking of machine learning experiments.
💻 Affected Systems
- aimhubio/aim
📦 What is this software?
Aim by Aimstack
⚠️ Risk & Real-World Impact
Worst Case
Complete server compromise via SSH key injection, arbitrary code execution, or destruction of critical system files leading to service disruption.
Likely Case
Data corruption, unauthorized file writes to sensitive directories, and potential privilege escalation leading to further attacks.
If Mitigated
Limited to file writes within application directories if proper sandboxing and file permission controls are implemented.
🎯 Exploit Status
Exploitation requires ability to upload tar files or control parameters, but the vulnerability itself is straightforward to exploit.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 3.19.4 or later
Vendor Advisory: https://huntr.com/bounties/7c97065c-1b63-4982-82c1-8038be0ed570
Restart Required: Yes
Instructions:
1. Update aim to version 3.19.4 or later using pip: pip install --upgrade aim==3.19.4
2. Restart the aim tracking server
3. Verify the fix by checking the version
🔧 Temporary Workarounds
Restrict file upload permissions
linuxImplement strict file permission controls to prevent writing outside application directories
chmod 750 /path/to/aim/directories
chown aim:aim /path/to/aim/directories
Input validation for tarfile parameters
allAdd validation to reject tarfiles with absolute paths or path traversal attempts
🧯 If You Can't Patch
- Implement strict network segmentation to isolate aim servers from critical infrastructure
- Deploy file integrity monitoring to detect unauthorized file writes to sensitive locations
🔍 How to Verify
Check if Vulnerable:
Check aim version: pip show aim | grep Version
If version is exactly 3.19.3, the system is vulnerable.Check Version:
pip show aim | grep VersionVerify Fix Applied:
After updating, verify version is 3.19.4 or later: pip show aim | grep Version📡 Detection & Monitoring
Log Indicators:
- Unusual tarfile extraction patterns
- File writes to unexpected directories
- Errors from tarfile.extractall() with suspicious paths
Network Indicators:
- Large tarfile uploads followed by file write operations
- Unusual parameter values in API calls
SIEM Query:
source="aim.log" AND ("tarfile.extractall" OR "repo.path" OR "run_hash") AND (".." OR "/etc" OR "/root" OR "/home")