EUVD-2026-37998
GHSA-jmhf-2rhf-v8gj
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable via web interface (AV:N), low complexity (AC:L), requires authenticated session (PR:L), no user interaction; limited confidentiality impact only (gzip-readable files); no integrity or availability impact; scope unchanged.
Primary rating from Vendor (CIRCL).
CVSS VectorVendor: CIRCL
Lifecycle Timeline
2DescriptionCVE.org
AIL framework contains a path traversal vulnerability in the /objects/item/diff endpoint. The endpoint accepts item identifiers through the s1 and s2 query parameters and, prior to the fix, attempted to retrieve and compare item contents without first verifying that both referenced items existed as valid AIL objects.
An authenticated AIL user could craft malicious item identifiers containing path traversal sequences to cause the application to read gzip-compressed files accessible to the AIL process. This could result in unauthorized disclosure of local file contents, limited to files readable by the application and compatible with the expected gzip-compressed item format.
The issue was fixed by validating that both requested items exist before their contents are accessed.
AnalysisAI
Path traversal in AIL Framework's /objects/item/diff endpoint exposes gzip-compressed server-side files to authenticated users. The Flask blueprint route in var/www/blueprints/objects_item.py accepted arbitrary item identifiers via s1 and s2 query parameters and attempted to read and compare their contents without first verifying they resolved to legitimate AIL objects, enabling directory traversal sequences to escape the items directory. No active exploitation has been identified at time of analysis; CIRCL reported the issue and an upstream fix is available via a GitHub commit.
Technical ContextAI
AIL (Analysis Information Leak) Framework is an open-source threat intelligence platform maintained by CIRCL, designed to ingest, analyze, and correlate data leaks. The vulnerable component is a Flask blueprint route (/objects/item/diff) that reads two AIL item files - stored as gzip-compressed objects on disk - and returns a diff of their contents. The root cause (CWE-22: Path Traversal) is the absence of object-existence validation on the user-supplied s1 and s2 parameters before the application opens the corresponding files. CPE cpe:2.3:a:ail-project:ail-framework:*:*:*:*:*:*:*:* with a wildcard version indicates the flaw existed across all versions up to the fix commit. The fix, as seen in the commit diff, inserts item.exists() checks for both identifiers and returns HTTP 404 for unknown items before any file I/O occurs.
RemediationAI
Apply the upstream fix by updating AIL Framework to a version that includes commit 074f9a432702d39d7f8db07ece3a11502cf36d73, available at https://github.com/ail-project/ail-framework/commit/074f9a432702d39d7f8db07ece3a11502cf36d73; no specifically tagged release version has been confirmed from available data, so verify with the upstream repository for a stable release incorporating this change. As a compensating control pending patch deployment, restrict network access to the AIL web interface - particularly the /objects/item/diff endpoint - to trusted IP ranges or internal networks via a reverse proxy or WAF rule; note this will prevent legitimate remote authenticated users from using the diff feature. Additionally, reduce the filesystem permissions of the AIL process user to the minimum necessary, ensuring it cannot read gzip files outside the intended AIL items directory; this limits the scope of any traversal even if the application is not yet patched.
More in Ail Framework
View allStored cross-site scripting in AIL Framework <6.8 allows authenticated high-privilege attackers to inject malicious Java
Authenticated path traversal in AIL Framework (CIRCL's Analysis Information Leak threat-intel platform) lets a low-privi
Global.py in AIL framework 2.8 allows path traversal. Rated high severity (CVSS 7.5), this vulnerability is remotely exp
Path traversal in AIL Framework's PDF object handling lets an authenticated user read files outside the intended PDF sto
Non-blind SSRF in AIL Framework's crawler submission interface allows low-privileged authenticated users to pivot throug
Unlimited OTP brute-force against AIL Framework's two-factor authentication endpoint allows an attacker who already poss
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today