{"data":{"id":"a6ff4c0a-97ec-49c9-9af7-4a0821fac4ee","title":"CVE-2024-12065: A local file inclusion vulnerability exists in haotian-liu/llava at commit c121f04. This vulnerability allows an…","summary":"CVE-2024-12065 is a local file inclusion vulnerability in haotian-liu/llava at commit c121f04. Improper input validation in the gradio web UI component lets an attacker read any file on the system by sending multiple crafted requests to the server. The entry is classified as CWE-22 and was published to NVD on 03/20/2025.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-12065","publishedAt":"2025-03-20T14:15:26.887Z","cveId":"CVE-2024-12065","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LLaVA"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"haotian-liu/llava local file inclusion in gradio web UI","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00945,"epssCheckedAt":"2026-11-04T12:08:35.001Z","kevDateAdded":null,"advisoryAliases":["GHSA-q36w-fgp3-q2gw"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:46.348Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}