A critical path traversal vulnerability in the Beifong AI News and Podcast Agent allows unauthenticated remote attackers to access sensitive files on the host filesystem.

This is a path traversal vulnerability located in the stream-audio function within routers/podcast_router.py. An unauthenticated attacker can supply a malicious path parameter to the stream-audio endpoint, which is processed without sufficient validation, leading to unauthorized file disclosure.

Successful exploitation permits an unauthenticated attacker to bypass directory restrictions and read arbitrary files from the underlying server. This exposure can lead to the theft of sensitive configuration files, system credentials, or application data, significantly compromising the confidentiality and integrity of the affected environment. The CVSS score of 7.5 reflects a high severity due to the lack of required authentication and the potential for broad data exposure.

Immediate Action: Review the official Infor security advisory for the latest patch or version update, and apply it immediately to the affected backend environment.

Proactive Monitoring: Monitor server access logs for suspicious requests to the stream-audio endpoint, specifically looking for directory traversal sequences like double dots and slashes.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block requests containing directory traversal patterns directed at the podcast router endpoints.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the research write-up referenced by the CVE record.

The risk associated with this vulnerability is significant, as it allows remote, unauthenticated access to system files. Administrators must prioritize the identification of instances running the vulnerable code and ensure that security patches are applied as soon as they are made available by the vendor. In the interim, ensure that the application is isolated from public networks where possible.