AI Plugin: Command injection in audioToWav in mudler/localai

[devampkid]

Hi, I'm excited to start contributing to the tsunami ecosystem with my first AI plugin.

I saw this request as very complicated to implement a plugin for: #551
but there is a CVE-2024-2029 for the same repository which I think I can implement according to the tsunami plugin capabilities.

The Exploit and description are available here: https://huntr.com/bounties/e092528a-ce3b-4e66-9b98-3f56d6b276b0.

According to the original report, the exploit is a simple HTTP POST request.

1. first we get the model names since the exploit needs the model name first.: curl http://localhost:8080/models
2. then we run the exploit according to the original report, the RCE is reflective so we don't need an out-of-band check too.

[maoning]

@devampkid ,

Thank you for the request, you can start working on this.

Please complete the following items before starting the plugin improvement work:

• Submit the vulnerable & secure configurations of the target application to google/security-testbeds.

• Submit our participation form.