CVE-2024-8438
📋 TL;DR
A path traversal vulnerability in modelscope/agentscope v0.0.4 allows attackers to read arbitrary files on the server by manipulating the 'path' parameter in the /api/file endpoint. This affects all deployments using the vulnerable version of the agentscope framework.
💻 Affected Systems
- modelscope/agentscope
📦 What is this software?
Agentscope by Modelscope
⚠️ Risk & Real-World Impact
Worst Case
Complete server compromise through reading sensitive files like SSH keys, configuration files, or database credentials, potentially leading to lateral movement and data exfiltration.
Likely Case
Unauthorized access to sensitive configuration files, source code, or user data stored on the server filesystem.
If Mitigated
Limited impact if proper file permissions restrict access to sensitive directories and files.
🎯 Exploit Status
Exploitation requires knowledge of the API endpoint and ability to craft HTTP requests with path traversal sequences.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: v0.0.5 or later
Vendor Advisory: https://huntr.com/bounties/3f170c58-42ee-422d-ab6f-32c7aa05b974
Restart Required: No
Instructions:
1. Update agentscope to v0.0.5 or later using pip install --upgrade agentscope. 2. Verify the update with pip show agentscope. 3. Test the /api/file endpoint with traversal attempts to confirm fix.
🔧 Temporary Workarounds
Input Validation Middleware
allAdd input validation to sanitize the 'path' parameter before processing
Implement path normalization and validation in your application code
Web Application Firewall
allConfigure WAF rules to block path traversal patterns
Add rule to block requests containing '../', '..\\', or absolute paths in path parameter
🧯 If You Can't Patch
- Restrict access to the /api/file endpoint using network ACLs or authentication
- Implement strict file system permissions to limit readable directories
🔍 How to Verify
Check if Vulnerable:
Test the /api/file endpoint with a path parameter containing '../etc/passwd' or similar traversal sequencesCheck Version:
pip show agentscope | grep VersionVerify Fix Applied:
Attempt the same traversal attack after patching; should return error or sanitized path📡 Detection & Monitoring
Log Indicators:
- HTTP requests to /api/file with '..' sequences in parameters
- Unusual file access patterns from web application logs
Network Indicators:
- HTTP requests with path traversal patterns in URL parameters
SIEM Query:
source="web_logs" AND uri_path="/api/file" AND (param_path="*..*" OR param_path="*../*")