Description
DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote attackers to create arbitrary directories via the output_dir parameter. Attackers, including cross-site GET requests from an operator's browser, can write chrome trace files to exhaust disk or inodes and use error messages as a filesystem oracle.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| deepseek-ai | DeepInfer | ≤ 0.1.0 | — |
References
- Pull Request #242 issue-tracking patch
- https://github.com/deepseek-ai/DeepInfer/blob/553741557a57df44a46fb3ab72b6aafeaf945337/deepinfer/engine/profile_server.py#L210 technical-description
- https://github.com/deepseek-ai/DeepInfer product
- VulnCheck Advisory: DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter third-party-advisory