Alquist Path Traversal Vulnerability (CNVD-2022-10717)

Alquist is an advanced conversational Ai bot used to have fun and engaging conversations with humans about popular topics such as movies, sports, news, etc. A security vulnerability exists in the Alquist Manager. The security vulnerability in Alquist Manager stems from a lack of effective filtering and escaping of user-submitted path data in the software’s alquist/IO/input.py file, leading to a directory traversal vulnerability, which could lead to an attack on critical secrets stored anywhere on the This attack could lead to the disclosure of critical secrets stored anywhere on the system, and could result in remote code access. No details of the vulnerability are available at this time.