CVE-2024-47170

Summary

CVE-2024-47170 is a vulnerability affecting Agnai, an artificial-intelligence-agnostic multi-user, multi-bot roleplaying chat system. Prior to version 1.0.330, this software is susceptible to an issue that allows attackers to read arbitrary JSON files on the server. This vulnerability poses a risk for unauthorized access to sensitive information and exposure of confidential configuration files. The exploit is only possible when the `JSON_STORAGE` feature is enabled, a setting intended for local/self-hosting installations. With the release of version 1.0.330, this issue has been addressed and resolved.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.