CVE-2024-47171

Summary

CVE-2024-47171 is a vulnerability affecting versions prior to 1.0.330 of Agnai, an artificial-intelligence-agnostic multi-user, multi-bot roleplaying chat system. This issue enables attackers to upload image files to arbitrary locations on the server, potentially leading to unauthorized image file uploads and overwriting of existing files, which could result in defacement. The vulnerability does not impact installations using Amazon S3-compatible storage, self-hosting that is not publicly exposed, or the `agnai.chat` service. Agnai has released version 1.0.330 to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.