Mistral.rs vulnerabilities

A vulnerability in EricLBuehler Mistral.rs up to 0.9.3 affects the function calibration_apply in mistralrs-server-core/src/handlers.rs. Manipulation of the argument save_cimatrix results in path traversal. The attack can be initiated remotely. The exploit is public. Upgrading to 0.9.4 fixes the issue.

A vulnerability in EricLBuehler mistral.rs up to 0.9.3 affects the function is_global_ip in mistralrs-server-core/src/media_source.rs. Manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit is public. Upgrading to 0.9.4 is recommended.

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input paths to access files with the server process's permissions.

A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22, affecting the function convert_gguf_to_hf_tokenizer of the file mistralrs-core/src/gguf/gguf_tokenizer.rs in the GGUF Tokenizer component. Manipulation of the arguments eos_token_id/bos_token_id/unknown_token_id results in out-of-bounds read. The attack can be executed remotely and the exploit is now public. Upgrading to version 0.8.23 can resolve this issue.