Description

CVE-2024-8251 is a Prisma injection vulnerability affecting versions prior to 1.2.2 of mintplex-labs/anything-llm. It resides within the "/embed/:embedId/stream-chat" API endpoint, where user-supplied JSON is directly incorporated into Prisma queries without proper sanitization. Attackers can inject malicious JSON payloads to bypass intended access controls, potentially exposing all user queries in embedded chat mode. Although the CVSS score is 5.3 (Medium), the SOCRadar Vulnerability Risk Score (SVRS) is 38, suggesting a lower, though still present, risk level. The vulnerability is actively exploited by hackers.

Key Insights

• Prisma Injection Vulnerability: The core issue is a Prisma injection vulnerability, meaning an attacker can manipulate database queries using specially crafted input. This bypasses normal access controls and exposes sensitive data.
• Unauthorized Data Access: Successful exploitation allows unauthorized access to all user queries within embedded chat, severely compromising data confidentiality.
• API Endpoint Weakness: The "/embed/:embedId/stream-chat" API endpoint is the specific attack vector, highlighting a flaw in input validation within this component.
• Vulnerability is in the Wild: The tag “In The Wild” indicates that this vulnerability is actively being exploited, increasing the urgency of remediation.

Mitigation Strategies

• Upgrade Anything-LLM: Immediately upgrade to version 1.2.2 or later of mintplex-labs/anything-llm to patch the vulnerability. This is the primary and most effective mitigation.
• Input Sanitization: Implement strict input sanitization and validation on the "/embed/:embedId/stream-chat" API endpoint. Ensure all user-supplied JSON data is properly validated and neutralized to prevent injection attacks.
• Principle of Least Privilege: Review and enforce the principle of least privilege for database access. Limit the permissions of the Prisma user account to only what is necessary for its function, minimizing the potential impact of a successful injection attack.
• Web Application Firewall (WAF): Deploy or configure a Web Application Firewall (WAF) to detect and block malicious requests targeting the vulnerable API endpoint. WAF rules can be created to identify and filter out known injection patterns.

Additional Information

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.