---
id: 5224
title: "[CVE-2024-53844] LabsAI’s EDDI Project Path Traversal"
cve: CVE-2024-53844
source_domain: xbow.com
source_url: "https://xbow.com/blog/xbow-eddi-path"
published_at: "2024-12-02T13:00:00Z"
tags: ["vulnerability-research", "open-source", "path-traversal", "eddi", "cve-2024-53844", "conversational-ai"]
phying_url: "https://phying.com/item/5224"
lang: en
---

# [CVE-2024-53844] LabsAI’s EDDI Project Path Traversal

## Summary

How XBOW autonomously found a path traversal in LabsAI's E.D.D.I. framework (CVE-2024-53844, fixed in 5.4): the /openapi spec led to a backup-import endpoint susceptible to file-system abuse.

## Intelligence Metadata

- **Sources:** xbow.com
- **CVE:** CVE-2024-53844
- **Published:** 2024-12-02T13:00:00Z
- **Original:** https://xbow.com/blog/xbow-eddi-path
- **Phying News:** https://phying.com/item/5224