haotian-liu llava Local File Inclusion Vulnerability
Vulnerability
A local file inclusion vulnerability has been identified in haotian-liu/llava, specifically at commit c121f04. This vulnerability allows an attacker to access any file on the system by sending multiple crafted requests to the server. The root cause of the issue is improper input validation in the gradio web UI component.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
3.3exploitability
3.3remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.