Rasa Nlu Chi
Monthly
Path traversal in the model persistor of crownpku Rasa_NLU_Chi (versions 0.12.0 through 0.12.2) lets an attacker who can influence a model archive that the Persistor later decompresses write outside the intended extraction directory, with low confidentiality, integrity and availability impact. The CVSS 4.0 vector (2.1, AV:N/AC:L/PR:L/UI:N) requires low-privilege access and the ability to supply or alter the model artifact being loaded or restored rather than simple anonymous reach. A public PoC reference exists; it is not verified as working exploit code, and there is no confirmed active exploitation (not in CISA KEV). The project was notified through GitHub issue #138 and has not responded, and no vendor-released patch has been identified at time of analysis, so the practical exposure is limited to deployments running this unmaintained fork.
Path traversal in the model persistor of crownpku Rasa_NLU_Chi (versions 0.12.0 through 0.12.2) lets an attacker who can influence a model archive that the Persistor later decompresses write outside the intended extraction directory, with low confidentiality, integrity and availability impact. The CVSS 4.0 vector (2.1, AV:N/AC:L/PR:L/UI:N) requires low-privilege access and the ability to supply or alter the model artifact being loaded or restored rather than simple anonymous reach. A public PoC reference exists; it is not verified as working exploit code, and there is no confirmed active exploitation (not in CISA KEV). The project was notified through GitHub issue #138 and has not responded, and no vendor-released patch has been identified at time of analysis, so the practical exposure is limited to deployments running this unmaintained fork.