{"vulnerability": "ghsa-wvrh-2f4m-924v", "sightings": [{"uuid": "b9e0356a-f737-418c-860e-3c59f5b66226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-WVRH-2F4M-924V", "type": "seen", "source": "https://gist.github.com/alon710/f71625529d1c2c0e0c6b0f02ed674488", "content": "# GHSA-WVRH-2F4M-924V: GHSA-wvrh-2f4m-924v: Symlink-Following Arbitrary File Write in ChatterBot UbuntuCorpusTrainer\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-06-19\n> **Full Report:** https://cvereports.com/reports/GHSA-WVRH-2F4M-924V\n\n## Summary\nAn insecure file extraction vulnerability exists in the UbuntuCorpusTrainer component of the ChatterBot package. Due to a combination of a predictable download path, a check-then-create directory pattern, and unvalidated symbolic link resolution during archive extraction, local attackers can write arbitrary files to restricted filesystem paths.\n\n## TL;DR\nThe UbuntuCorpusTrainer component in ChatterBot is vulnerable to a local symlink-following attack that allows arbitrary file writes. Attackers can pre-plant symbolic links in predictable paths to redirect archive extraction, potentially overwriting critical user files or system configurations.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-59: Improper Link Resolution Before File Access\n- **Attack Vector**: Local (AV:L)\n- **CVSS v3.1 Score**: 5.5 (Medium)\n- **Exploit Status**: Proof of Concept Publicly Available\n- **CISA KEV Status**: Not Listed\n- **Impact**: Arbitrary File Write / Local Privilege Escalation\n\n## Affected Systems\n\n- Systems running chatterbot versions <= 1.2.13\n- Local multi-user environments executing machine learning training pipelines using UbuntuCorpusTrainer\n- **chatterbot**: <= 1.2.13 (Fixed in: `1.2.14`)\n\n## Mitigation\n\n- Upgrade chatterbot to version 1.2.14 or later.\n- Implement strict path validation checks in custom wrappers using os.path.realpath.\n- Restrict permissions on the application execution workspace to prevent local users from creating arbitrary symbolic links.\n\n**Remediation Steps:**\n1. Open your project dependency file (e.g., requirements.txt, Pipfile, setup.py).\n2. Locate the chatterbot package declaration and update the version requirement to >=1.2.14.\n3. Run pip install --upgrade chatterbot to apply the update.\n4. Audit existing directories under ~/ubuntu_data to ensure no rogue symbolic links exist.\n\n## References\n\n- [GitHub Security Advisory GHSA-wvrh-2f4m-924v](https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v)\n- [ChatterBot GitHub Repository](https://github.com/gunthercox/ChatterBot)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-WVRH-2F4M-924V) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-22T03:21:45.000000Z"}, {"uuid": "d585975b-3ebc-41f3-9318-b95162b42b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-WVRH-2F4M-924V", "type": "seen", "source": "https://gist.github.com/alon710/c7e86c644a18ac812b6d13eff8101d8c", "content": "# GHSA-WVRH-2F4M-924V: GHSA-wvrh-2f4m-924v: Symlink-Following Arbitrary File Write in ChatterBot UbuntuCorpusTrainer\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-06-19\n> **Full Report:** https://cvereports.com/reports/GHSA-WVRH-2F4M-924V\n\n## Summary\nAn insecure file extraction vulnerability exists in the UbuntuCorpusTrainer component of the ChatterBot package. Due to a combination of a predictable download path, a check-then-create directory pattern, and unvalidated symbolic link resolution during archive extraction, local attackers can write arbitrary files to restricted filesystem paths.\n\n## TL;DR\nThe UbuntuCorpusTrainer component in ChatterBot is vulnerable to a local symlink-following attack that allows arbitrary file writes. Attackers can pre-plant symbolic links in predictable paths to redirect archive extraction, potentially overwriting critical user files or system configurations.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-59: Improper Link Resolution Before File Access\n- **Attack Vector**: Local (AV:L)\n- **CVSS v3.1 Score**: 5.5 (Medium)\n- **Exploit Status**: Proof of Concept Publicly Available\n- **CISA KEV Status**: Not Listed\n- **Impact**: Arbitrary File Write / Local Privilege Escalation\n\n## Affected Systems\n\n- Systems running chatterbot versions <= 1.2.13\n- Local multi-user environments executing machine learning training pipelines using UbuntuCorpusTrainer\n- **chatterbot**: <= 1.2.13 (Fixed in: `1.2.14`)\n\n## Mitigation\n\n- Upgrade chatterbot to version 1.2.14 or later.\n- Implement strict path validation checks in custom wrappers using os.path.realpath.\n- Restrict permissions on the application execution workspace to prevent local users from creating arbitrary symbolic links.\n\n**Remediation Steps:**\n1. Open your project dependency file (e.g., requirements.txt, Pipfile, setup.py).\n2. Locate the chatterbot package declaration and update the version requirement to >=1.2.14.\n3. Run pip install --upgrade chatterbot to apply the update.\n4. Audit existing directories under ~/ubuntu_data to ensure no rogue symbolic links exist.\n\n## References\n\n- [GitHub Security Advisory GHSA-wvrh-2f4m-924v](https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v)\n- [ChatterBot GitHub Repository](https://github.com/gunthercox/ChatterBot)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-WVRH-2F4M-924V) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-22T03:32:02.000000Z"}, {"uuid": "76547ebb-20b9-435b-bcca-fb9ea6d18e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-WVRH-2F4M-924V", "type": "seen", "source": "https://gist.github.com/alon710/18941cf020009371f2f6560347d44c47", "content": "# GHSA-WVRH-2F4M-924V: GHSA-wvrh-2f4m-924v: Symlink-Following Arbitrary File Write in ChatterBot UbuntuCorpusTrainer\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-06-19\n> **Full Report:** https://cvereports.com/reports/GHSA-WVRH-2F4M-924V\n\n## Summary\nAn insecure file extraction vulnerability exists in the UbuntuCorpusTrainer component of the ChatterBot package. Due to a combination of a predictable download path, a check-then-create directory pattern, and unvalidated symbolic link resolution during archive extraction, local attackers can write arbitrary files to restricted filesystem paths.\n\n## TL;DR\nThe UbuntuCorpusTrainer component in ChatterBot is vulnerable to a local symlink-following attack that allows arbitrary file writes. Attackers can pre-plant symbolic links in predictable paths to redirect archive extraction, potentially overwriting critical user files or system configurations.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-59: Improper Link Resolution Before File Access\n- **Attack Vector**: Local (AV:L)\n- **CVSS v3.1 Score**: 5.5 (Medium)\n- **Exploit Status**: Proof of Concept Publicly Available\n- **CISA KEV Status**: Not Listed\n- **Impact**: Arbitrary File Write / Local Privilege Escalation\n\n## Affected Systems\n\n- Systems running chatterbot versions <= 1.2.13\n- Local multi-user environments executing machine learning training pipelines using UbuntuCorpusTrainer\n- **chatterbot**: <= 1.2.13 (Fixed in: `1.2.14`)\n\n## Mitigation\n\n- Upgrade chatterbot to version 1.2.14 or later.\n- Implement strict path validation checks in custom wrappers using os.path.realpath.\n- Restrict permissions on the application execution workspace to prevent local users from creating arbitrary symbolic links.\n\n**Remediation Steps:**\n1. Open your project dependency file (e.g., requirements.txt, Pipfile, setup.py).\n2. Locate the chatterbot package declaration and update the version requirement to >=1.2.14.\n3. Run pip install --upgrade chatterbot to apply the update.\n4. Audit existing directories under ~/ubuntu_data to ensure no rogue symbolic links exist.\n\n## References\n\n- [GitHub Security Advisory GHSA-wvrh-2f4m-924v](https://github.com/gunthercox/ChatterBot/security/advisories/GHSA-wvrh-2f4m-924v)\n- [ChatterBot GitHub Repository](https://github.com/gunthercox/ChatterBot)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-WVRH-2F4M-924V) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-22T03:42:22.000000Z"}]}