Skip to content
OpenAdvisories

Vendor

labsai

2 known vulnerabilities.

Products

EDDI 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-32779

    labsai/eddi Vulnerable to Path Traversal (Zip Slip) in ZIP Import Function

    E.D.D.I (Enhanced Dialog Driven Interface) is a middleware to connect and manage LLM API bots. In versions before 5.5.0, an attacker with access to the `/backup/import` API endpoint can write arbitrary files to locations outside the intended extraction direct…

    labsai EDDI
  • Medium 6.3
    CVE-2024-53844

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in labsai/eddi

    E.D.D.I (Enhanced Dialog Driven Interface) is a middleware to connect and manage LLM API bots. A path traversal vulnerability exists in the backup export functionality of EDDI, as implemented in `RestExportService.java`. This vulnerability allows an attacker …

    labsai EDDI