Executive brief
The AIL framework, a platform for analyzing information leaks, contains a security flaw in its file comparison feature. An authorized user could exploit this to bypass directory restrictions and view sensitive files on the server. While the exposure is limited to specific compressed file formats, it could lead to the unauthorized disclosure of internal system data.
Technical details
A path traversal vulnerability (CWE-22) exists in the AIL framework's '/objects/item/diff' endpoint. The endpoint processes item identifiers via the 's1' and 's2' query parameters without verifying if the requested items are valid AIL objects before attempting to retrieve their content. An authenticated attacker can provide malicious paths containing traversal sequences (e.g., ../) to force the application to read files from the local filesystem. The impact is limited to files that the AIL process has permission to read and that conform to the expected gzip-compressed format used by the framework. The vulnerability was addressed in version 6.8.0 by implementing existence checks for items before content access.
Affected products
- ail-project AIL framework < 6.8.0
Timeline
- 2026-06-19: advisory: NVD publication date
- 2026-06-19: patched: Fix committed to repository