EUVD-2026-16640
GHSA-pj2x-hxmc-9rc3
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
3DescriptionCVE.org
A path traversal vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19) in the Beifong AI News and Podcast Agent backend in FastAPI backend, stream-audio endpoint, in file routers/podcast_router.py, in function stream_audio. The stream-audio endpoint accepts a user-controlled path parameter that is concatenated into a filesystem path without proper validation or restriction. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary files from the server filesystem, potentially disclosing sensitive information such as configuration files and credentials.
AnalysisAI
Unauthenticated remote attackers can read arbitrary files from servers running the awesome-llm-apps Beifong AI News and Podcast Agent backend by exploiting a path traversal vulnerability in the stream-audio endpoint (routers/podcast_router.py, function stream_audio). The endpoint concatenates user-controlled path parameters directly into filesystem paths without validation, allowing attackers to traverse directory structures and disclose sensitive configuration files, credentials, and other confidential data. No public exploit code or active exploitation has been independently confirmed at the time of this analysis.
Technical ContextAI
The vulnerability exists in a FastAPI-based backend application for the awesome-llm-apps project. FastAPI is a modern Python web framework that handles HTTP routing and request processing. The vulnerable stream-audio endpoint accepts a path parameter from user input and concatenates it directly into a filesystem path without applying path normalization, validation, or access controls. This is a classic path traversal vulnerability (CWE class not specified in input, but consistent with CWE-22: Improper Limitation of a Pathname to a Restricted Directory). The affected code is in commit e46690f99c3f08be80a9877fab52acacf7ab8251 dated 2026-01-19. Path traversal attacks typically exploit directory traversal sequences (e.g., ../) or absolute path injection to bypass intended directory restrictions and access arbitrary filesystem locations.
RemediationAI
Immediately upgrade the awesome-llm-apps project to a patched version released after 2026-01-19 if available from the upstream repository, or apply a commit that includes input validation and path normalization for the stream-audio endpoint. The remediation must sanitize all user-controlled path parameters by implementing strict path validation (e.g., using os.path.normpath and os.path.commonpath to ensure the resolved path remains within an allowed directory), rejecting path traversal sequences (.., /, etc.), and applying principle of least privilege file access controls. Until a patched version is deployed, operators should restrict network access to the stream-audio endpoint via firewall rules, reverse proxy authentication/authorization layers, or API gateway policies to limit exposure to trusted clients only. Consult the upstream security advisory at https://github.com/lilmingwa13/security-research/blob/main/CVE-2026-29871.md and the awesome-llm-apps repository for patch availability and migration guidance.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today