GHSA-pq7c-x8g4-rvp6: NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes

Summary

Two FastAPI routes in NiceGUI, the per-component resource route (added in v1.4.6) and the ESM module route (added in v3.0.0), accept a sub-path that can resolve to a directory. The existence check uses pathlib.Path.exists(), which returns True for directories, so the request passes the guard and raises an unhandled RuntimeError inside Starlette's FileResponse, which Uvicorn logs as a full traceback. Because the routes need no authentication, a remote attacker can inflate log volume and consume disk and log-pipeline capacity, with no confidentiality or integrity impact.

Mitigation

Upgrade NiceGUI. For deployments that cannot upgrade immediately: place NiceGUI behind a reverse proxy that rejects requests where the path after /_nicegui/<version>/esm/<key>/ or /_nicegui/<version>/resources/<key>/ is empty; rate-limit the /_nicegui/ prefix at the proxy; and configure log rotation aggressively for the affected service.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• niceguiPyPINo LLM dependency detected · 1 tracked dependent

Related items

• HighCVE-2026-123356: GROBID unauthenticated thread exhaustion through /api/modelTraining endpointSimilar attack · NVD/CVE Database
• MediumCVE-2026-83494: training-operator immutability check bypass in PyTorchJob ValidateUpdate webhookSimilar attack · NVD/CVE Database
• CriticalCVE-2026-48705: MONAI PydicomReader affine computation accepts non-finite DICOM valuesSimilar attack · NVD/CVE Database
• LowCloakFEM: Agentic FEM Code Generation for Red-Teaming Computational Resource ExhaustionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumThe Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model ResourcesSimilar attack · Google Threat Intelligence