Ai Infra Guard
Monthly
Local path traversal in Tencent AI-Infra-Guard (versions up to 4.5.2 and the 4.6.2 line referenced by the vendor report) lets an attacker who can influence the file or directory path arguments processed by the scanner's skill-scan and mcp-scan file tools escape the configured working directory, reading or writing files outside the intended root. The defect is a directory-containment check that used a plain string prefix comparison rather than a canonical-path comparison, so both traversal sequences and sibling directories with a shared name prefix bypass it; exploitation requires local access with low privileges plus passive user interaction, since an operator must run a scan over attacker-influenced paths or content. Publicly available exploit code exists (referenced through the vendor's GitHub issue tracker), and the vendor has shipped a fix in the v4.6.0 release; the CVSS 4.0 score of 0.9 reflects the heavily constrained local attack path, and this analysis agrees with the independent assessment that the practical risk is low.
Tencent AI-Infra-Guard 4.0 discloses sensitive information through an unknown function in the Task Detail Endpoint (common/websocket/task_manager.go) that can be manipulated by remote, unauthenticated attackers. The vulnerability has a CVSS score of 5.5 with publicly available exploit code, though no patch has been released despite early vendor notification.
Local path traversal in Tencent AI-Infra-Guard (versions up to 4.5.2 and the 4.6.2 line referenced by the vendor report) lets an attacker who can influence the file or directory path arguments processed by the scanner's skill-scan and mcp-scan file tools escape the configured working directory, reading or writing files outside the intended root. The defect is a directory-containment check that used a plain string prefix comparison rather than a canonical-path comparison, so both traversal sequences and sibling directories with a shared name prefix bypass it; exploitation requires local access with low privileges plus passive user interaction, since an operator must run a scan over attacker-influenced paths or content. Publicly available exploit code exists (referenced through the vendor's GitHub issue tracker), and the vendor has shipped a fix in the v4.6.0 release; the CVSS 4.0 score of 0.9 reflects the heavily constrained local attack path, and this analysis agrees with the independent assessment that the practical risk is low.
Tencent AI-Infra-Guard 4.0 discloses sensitive information through an unknown function in the Task Detail Endpoint (common/websocket/task_manager.go) that can be manipulated by remote, unauthenticated attackers. The vulnerability has a CVSS score of 5.5 with publicly available exploit code, though no patch has been released despite early vendor notification.