CVE-2025-32779

Vulnerability

Overview

E.D.D.I (Enhanced Dialog Driven Interface) versions before 5.5.0 contain a Zip Slip vulnerability in the /backup/import API endpoint [1]. The ZIP extraction code in ai.labs.eddi.backup.impl.ZipArchive fails to sanitize entry names, allowing path traversal sequences (e.g., ../) to resolve outside the intended extraction directory [2][3]. This occurs when processing chatbot configuration archives uploaded via the import feature.

Attack

Vector and Prerequisites

An attacker with access to the /backup/import endpoint can upload a crafted ZIP archive containing entries with relative paths [3]. No authentication is bypassed; the attacker must already have access to this API. The application runs as a non-root user (UID 185), but the extracted files can overwrite any file owned by that user, including JAR libraries, configuration files, or executable scripts [2][3].

Impact

Successful exploitation allows arbitrary file write within the application's user context. Overwriting application JAR files or scripts can lead to Remote Code Execution (RCE) when the overwritten code is subsequently loaded or executed [1][2][3]. The impact is limited to files owned by the application user, but this still enables full compromise of the EDDI service.

Mitigation

The vulnerability is patched in EDDI version 5.5.0 [1][3]. The fix includes proper path canonicalization and validation to ensure extracted files remain within the target directory. Users should upgrade immediately. No specific workarounds are available for unpatched versions [3].