Description
A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected