Path Traversal in Slide-Maker via OpenAI Image Generation

Executive Summary

This vulnerability is a path traversal issue in the slide-maker tool through version 5.8.0. It exists in the generate_images_openai.py script where attackers can manipulate filenames in a manifest to write image files outside the intended output directory. By using sequences like ../ or symlinked paths, attackers can create directories and overwrite files at arbitrary system locations.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect the slide-maker tool version and check for the presence of generate_images_openai.py in your system. Look for unexpected file writes or directory creations outside the intended output directory. Review any JSON manifests used for image generation for filenames containing ../ or absolute paths.

Useful 0 Not Useful 0

Impact Analysis

An attacker could overwrite critical system files, plant malicious files, or create directories in unintended locations. This could lead to system compromise, data corruption, or denial of service if important files are overwritten. The attack requires influence over the source material used to generate the slide deck.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update slide-maker to a version that includes path containment checks in generate_images_openai.py. If an update is unavailable, disable the OpenAI image generator component or restrict write permissions to the output directory. Review and sanitize all filenames in manifests before processing.

Useful 0 Not Useful 0