CyberRota Analysis
AI-GeneratedComposio SDK versions prior to 0.2.32-beta.283 are vulnerable to a path validation bypass that enables attackers to read and exfiltrate sensitive files, including SSH private keys, by exploiting a missing safety check in the file upload process. This vulnerability can be exploited through prompt injection, allowing attackers to manipulate file paths and upload sensitive credentials to their own storage. Organizations using Composio SDK should prioritize patching this vulnerability to mitigate the risk of credential theft and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Composio SDK before 0.2.32-beta.283 contains a path validation bypass vulnerability that allows attackers to read and exfiltrate sensitive files by exploiting a missing assertSafeFileUploadPath check in the readFileFromDisk function within tool-file-uploads.ts. Attackers can exploit prompt injection to manipulate file_uploadable parameters to reference sensitive paths such as SSH private keys, causing the CLI to upload credential files to attacker-controlled storage.