CVE-2024-8958

CVE-2024-8958 is a critical unrestricted file write and read vulnerability affecting composiohq/composio version 0.4.3. This flaw stems from improper validation of file paths within the filetools actions, allowing an attacker to read and write files anywhere on the server. With a CVSS score of 9.8 (CRITICAL), this vulnerability presents a significant risk of privilege escalation or remote code execution due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered considerable community discussion, indicating awareness and potential for future exploitation.