CVE-2021-43495

CVE-2021-43495 is a directory traversal vulnerability affecting the AlquistManager branch of alquistai alquist, specifically in the alquist/IO/input.py component. This flaw allows an unauthenticated attacker to read arbitrary files on the system, potentially disclosing critical secrets and aiding in remote code execution. With a CVSS score of 7.5 (HIGH), it presents a significant risk due to its network-based attack vector and low attack complexity, leading to high confidentiality impact. While not listed in CISA's KEV catalog, Nuclei templates exist for detecting this Local File Inclusion, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.