CVE-2024-6331

stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read (LFI) by Prompt Injection. The integration of Google Gimini 1.0 Pro with `HarmBlockThreshold.BLOCK_NONE` for `HarmCategory.HARM_CATEGORY_HATE_SPEECH` and `HarmCategory.HARM_CATEGORY_HARASSMENT` in `safety_settings` disables content protection. This allows malicious commands to be executed, such as reading sensitive file contents like `/etc/passwd`.

Score

CVSS 3.1 7.5 High

Status

Modified - security@huntr.dev

Published

2024-08-04

Last modified

2024-08-30

Weaknesses

CWE-74

Affected products

• Devika (Stitionai)
• Stitionaidevika (Stitionai)

References

• https://huntr.com/bounties/d5ac1051-22fa-42f0-8d82-73267482e60f