A path traversal vulnerability in Red Hat Enterprise Linux AI (RHEL AI) 3 allows local attackers to perform unauthorized file operations, posing a significant risk of data compromise.

This is a path traversal flaw (CWE-22) occurring within the InstructLab chat session handler. A local attacker with low privileges can manipulate the logs_dir parameter to bypass directory restrictions, enabling the creation of new directories and the writing of files to arbitrary system locations.

The ability to write files to arbitrary locations on a system can lead to unauthorized data modification, disclosure of sensitive information, or the potential for privilege escalation if configuration files are overwritten. With a CVSS score of 7.1, this vulnerability represents a high risk to the confidentiality and integrity of the affected host environment, necessitating prompt attention despite the requirement for local access.

Immediate Action: Review the official Red Hat security advisory for the availability of a patched release or configuration-based hotfix for RHEL AI 3 and apply it immediately.

Proactive Monitoring: Monitor system logs for unusual file system activity or attempts to access directories outside of expected application paths, particularly involving the InstructLab service.

Compensating Controls: Implement strict file system permissions and least-privilege policies to ensure that the user account running the InstructLab service cannot write to sensitive system directories.

Public Exploit Available: No

Given the potential for unauthorized file system modifications, administrators should prioritize the remediation of this flaw in environments where RHEL AI 3 is deployed. While the vulnerability requires local access, the resulting impact on system integrity is severe, and applying vendor-supplied security updates remains the most effective method to mitigate this risk.