AIKIDO-2026-583449
lightrag-hku is vulnerable to Path Traversal
53
Medium Risk
This Affects:
lightrag-hkuTL;DR
The LightRAG API server writes uploaded documents into the input directory using a permissive filename sanitizer and a non-exclusive file open that follows symlinks. Crafted upload filenames can be reinterpreted as NTFS alternate data streams, an existing symlink in the target directory can redirect the write outside the intended directory. This lets untrusted upload input influence where and how files are written on the server host. The fix rejects unsafe filenames outright and uses an exclusive, no-follow secure opener confined to the input directory.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you run the LightRAG API server and allow untrusted users to upload documents.
Background info
lightrag-hku is vulnerable to Path Traversal in versions 1.4.0 - 1.5.5.
How to fix this
Upgrade the lightrag-hku library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant