High severity8.6NVD Advisory· Published Apr 30, 2021· Updated Jun 17, 2026

CVE-2020-4039

Description

SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient input validation. Any admin config and file readable by the app can be retrieved by the attacker. Furthermore, some files can also be moved or deleted.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fossasia/Susi.ai
cpe:2.3:a:fossasia:susi.ai:*:*:*:*:*:*:*:*
Range: <2020-05-13
SUSI.AI/SUSI.AI Serverllm-create
Range: <d27ed0f
Fossasia/SUSI.AI Servercpe-rescue
Range: <=d27ed0f

Patches

Vulnerability mechanics

References

github.com/fossasia/susi_server/security/advisories/GHSA-wcm4-2jp5-q269nvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000