Unauthenticated Arbitrary File Read in DeepWiki-Open

Executive Summary

This vulnerability is an unauthenticated arbitrary file read issue in DeepWiki-Open. It exists in the GET /codemap/file endpoint where the repo_url parameter is not properly validated. Attackers can bypass path checks by providing non-URL values and read any file accessible to the API process using absolute file paths.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if the DeepWiki-Open API is running and test the /codemap/file endpoint with a non-URL repo_url parameter. Use curl commands like: curl -v 'http://target/codemap/file?repo_url=file:///etc/passwd' to see if arbitrary files are returned.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to read sensitive files on the server, including configuration files, source code, or other confidential data. This could lead to further attacks like data theft, privilege escalation, or system compromise depending on the exposed files.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Organizations may face compliance violations, legal penalties, and reputational damage if exploited.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update DeepWiki-Open to a version beyond commit d92819a. If an update is not available, restrict access to the /codemap/file endpoint or implement strict input validation for the repo_url parameter to prevent path traversal.

Useful 0 Not Useful 0