This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: Path Traversal in Deep Java Library (DJL) allows writing files to arbitrary locations. ๐ฅ **Consequences**: Full system compromise, data corruption, or RCE via malicious model archives.
Q2Root Cause? (CWE/Flaw)
๐ก๏ธ **Root Cause**: CWE-36 (Path Traversal). ๐ **Flaw**: `ZipUtils.unzip` and `TarUtils.untar` fail to sanitize filenames, allowing `../` sequences to escape the target directory.
Q3Who is affected? (Versions/Components)
๐ฅ **Affected**: AWS Deep Java Library (DJL). ๐ฆ **Versions**: All versions **prior to 0.31.1**. ๐งฉ **Component**: Model loading utilities for ZIP/TAR archives.
Q4What can hackers do? (Privileges/Data)
๐ **Attacker Actions**: Write arbitrary files to the file system (e.g., `C:\Windows\System32\`). ๐ **Impact**: High Confidentiality, Integrity, and Availability loss. Potential for Remote Code Execution (RCE).
Q5Is exploitation threshold high? (Auth/Config)
โก **Threshold**: LOW. ๐ **Auth**: None required (PR:N). ๐ **Vector**: Network (AV:N). ๐ฑ๏ธ **UI**: None required (UI:N). Simply loading a malicious model triggers it.
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ **Public Exploit**: YES. ๐ **PoC**: Available on GitHub (skrkcb2/CVE-2025-0851). ๐งช **Proof**: Successfully created files in `System32` using crafted JAR/TAR files.
Q7How to self-check? (Features/Scanning)
๐ **Self-Check**: Scan for DJL versions < 0.31.1. ๐ฆ **Dependency Audit**: Check `pom.xml` or `build.gradle` for `ai.djl` dependencies. ๐ฉ **Flag**: Look for usage of `ZipUtils` or `TarUtils` without validation.
Q8Is it fixed officially? (Patch/Mitigation)
โ **Fixed**: YES. ๐ **Patch**: Released in **v0.31.1**. ๐ **Source**: GitHub releases and AWS Security Bulletin AWS-2025-003.
Q9What if no patch? (Workaround)
๐ **Workaround**: If unpatched, **disable automatic model extraction** from untrusted sources. ๐ซ **Mitigation**: Validate archive contents manually before loading.โฆ