Dem00000

**Name of the Vulnerable Software and Affected Versions** AkariAsai self-rag versions up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99 **Description** An issue exists in the `retrieval lm` component within the `Indexer.deserialize from()` function of the `retrieval lm/src/index.py` file. A remote attacker can trigger deserialization by manipulating the `index meta.faiss` argument. Deserialization is a process of converting a serialized format (like a byte stream) back into an object, which can lead to arbitrary code execution if the input is untrusted. **Recommendations** As a temporary workaround, restrict access to the `Indexer.deserialize from()` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AidanPark openclaw-android versions prior to 0.4.1 **Description** An OS command injection issue exists within the Android WebView Bridge component, specifically in an unknown function located in the `android/app/src/main/java/com/openclaw/android/JsBridge.kt` file. This flaw allows for the execution of arbitrary operating system commands, although the attack can only be performed locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AD-Security AD Miner version 1.9.0 **Description** An issue exists in the Cache Handler component within the `request a()` function of the `ad miner/scripts/analyse cache.py` file. Local manipulation of the `sys.argv[1]` variable leads to insecure deserialization, which occurs when data is converted from a byte stream back into an object. This flaw can only be exploited by a local attacker. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FederatedAI FATE versions prior to 2.2.1 **Description** An issue exists in the OSX Broker component within the `QueuePushReqStreamObserver.initEggroll()` function. Remote manipulation of the `rollSiteSessionId`, `dstRole`, or `dstPartyId` arguments can lead to the exposure of data elements to an incorrect session. This attack is characterized by high complexity and difficult exploitability. **Recommendations** As a temporary workaround, restrict access to the `QueuePushReqStreamObserver.initEggroll()` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ForceInjection AI-fundermentals versions 2.0 through 3.0 **Description** The Memory Recall Handler component contains an issue within the `get conversation history()` function located in the `08 agentic system/memory/langchain/code/smart customer service.py` file. This flaw allows for the use of a weak hash, which can be exploited remotely. Successful exploitation requires a high degree of complexity and is considered difficult. **Recommendations** Install the patch identified as f57277fdd9ba373ace72d83c272023ec67f720d6 for versions 2.0 through 3.0. As a temporary mitigation, restrict access to the `get conversation history()` function.

**Name of the Vulnerable Software and Affected Versions** DeepMyst Mysti versions prior to 0.4.0 **Description** Remote manipulation of the `workspacePath` argument within the `initProjectMemory()` function, located in the `src/managers/MemoryManager.ts` file of the Per-Project Auto-Memory Handler component, can lead to resource exposure. **Recommendations** Upgrade to version 0.4.0.