AIChat 0.30.0 HTTP Request Body DoS: Unbounded Buffering Fix & PoC

AIChat HTTP 服务请求体处理拒绝服务（DoS）漏洞总结 漏洞概述 AIChat 的 OpenAI 兼容 HTTP 服务模式存在拒绝服务（DoS）漏洞。 、 、 和 路由会收集完整的 HTTP 请求体到内存，但没有预读取请求体大小限制、JSON 深度限制、数组元素限制、字符串长度限制、API 认证、每客户端速率限制或并发预算。当 AIChat 作为共享本地网关、内部服务、容器化应用或反向代理后端部署时，未认证的客户端可发送超大请求体，迫使服务进程分配内存，导致正常模型、playground、embedding、rerank 和 RAG API 请求不可用。 影响范围 受影响版本：AIChat 0.30.0 漏洞文件： 受影响路由： 、 、 、 根本原因：HTTP dispatcher 直接暴露 OpenAI 兼容 API 路径，转发请求到路由处理器时没有认证或请求准入控制；每个受影响的 POST 处理器都会先缓冲整个请求体（ ），且没有预读取大小上限、 数量上限、 数量上限、 数量上限或字符串长度限制。 修复方案 1. 在 之前强制设置 HTTP 请求体大小上限。 2. 返回 ，当 JSON 解析或流式读取超过限制时。 3. 添加 API 认证或显式 local-only 网关模式，或基于绑定/非回环地址。 4. 为 、 、 、 、 添加 schema 限制、字符串长度和 JSON 嵌套深度限制。 5. 尽可能用有界流式读取替代全量缓冲。 6. 添加每 IP 或每客户端速率限制和并发请求限制。 7. 在调试模式下避免记录完整请求体。 8. 添加回归测试：向每个 POST 路由发送超大请求体，断言拒绝行为及模型 dispatch。 POC 代码 ```powershell $Image = "aichat-serve-body-dos-repro-0.30.0" $Container = "aichat-serve-body-dos-repro" $BaseUri = "http://127.0.0.1:8080" $Payload = "E:\agent_vul\aichat-0.30.0\aichat-0.30.0" $Bin = "E:\agent_vul\aichat-0.30.0\aichat-0.30.0\security-repro\serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-repro-serve-body-dos\bin\security-

目標達成すべての支援者に感謝 — 100%達成しました！

AIChat 0.30.0 HTTP Request Body DoS: Unbounded Buffering Fix & PoC

このソースからの他の記事

目標達成 すべての支援者に感謝 — 100%達成しました！

AIChat 0.30.0 HTTP Request Body DoS: Unbounded Buffering Fix & PoC

このソースからの他の記事

目標達成すべての支援者に感謝 — 100%達成しました！