CVE-2024-6433: Stitionai Devika

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The application zips all the files in the folder specified by the user, which allows an attacker to read arbitrary files on the system by providing a crafted path. This vulnerability can be exploited by sending a request to the application with a malicious snapshot_path parameter.

Affected products

• Stitionai Devika: version 0 only
• Stitionai Stitionai/devika

Published 2024-07-10. Last modified 2026-06-17.