Skip to content

Remote Code Execution in the text box of Dalai #287

Open
@mafen

Description

@mafen

I was testing some of the texts from the https://github.com/ggerganov/llama.cpp and when i put It is $(date)

(date +%H:%M) outputted the current time

image

I also tested with command touch and the file was created in my docker container attached folder

Same goes for $(env)
image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions