CVE-2024-12065

Name of the Vulnerable Software and Affected Versions haotian-liu/llava at commit c121f04

Description A local file inclusion issue exists, allowing an attacker to access any file on the system by sending multiple crafted requests to the server. This is due to improper input validation in the gradio web UI component.

Recommendations For haotian-liu/llava at commit c121f04, consider disabling the gradio web UI component until a patch is available to prevent exploitation. Restrict access to sensitive files and directories to minimize the risk of unauthorized access. At the moment, there is no information about a newer version that contains a fix for this issue.