CyberRota Analysis
AI-GeneratedThe vulnerability exists in the FlashAttention library, specifically in the download_and_copy() function, which fails to properly validate symlinks when extracting NVIDIA toolchain archives. This flaw allows a local attacker to exploit a symlink to redirect extracted binaries to a location of their choosing, potentially leading to arbitrary file writes with the privileges of the victim during the build process. Developers and organizations utilizing FlashAttention versions up to 2.8.3.post1 should prioritize applying the fix to mitigate the risk of local exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the download_and_copy() function within hopper/setup.py that extracts NVIDIA toolchain archives without validating symlinks or filtering tar members. A local attacker can pre-plant a symlink in the predictable cache directory to redirect extracted binaries to an attacker-chosen location, enabling arbitrary file write with victim privileges during build time.