CVE-2024-40422

CRITICAL NUCLEI

stitionai devika v1 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2024-40422. PoCs published by Alperen Ergel, j3r1ch0123. A Nuclei detection template is also available.

AI-analyzed exploit summary This exploit demonstrates a path traversal vulnerability in Devika v1 via the 'snapshot_path' parameter in the '/api/get-browser-snapshot' endpoint. It allows an attacker to read arbitrary files (e.g., '/etc/passwd') by manipulating the parameter with directory traversal sequences.

Description

The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack. An attacker can manipulate the snapshot_path parameter to traverse directories and access sensitive files on the server. This can potentially lead to unauthorized access to critical system files and compromise the confidentiality and integrity of the system.

Exploits (2)

exploitdb WORKING POC
by Alperen Ergel · pythonwebappspython
https://www.exploit-db.com/exploits/52066

This exploit demonstrates a path traversal vulnerability in Devika v1 via the 'snapshot_path' parameter in the '/api/get-browser-snapshot' endpoint. It allows an attacker to read arbitrary files (e.g., '/etc/passwd') by manipulating the parameter with directory traversal sequences.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Devika v1
No auth needed
Prerequisites: Network access to the target application
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC 1 stars
by j3r1ch0123 · poc
https://github.com/j3r1ch0123/CVE-2024-40422

This repository contains a functional Python exploit for CVE-2024-40422, a path traversal vulnerability in Devika v1. The exploit sends a crafted request to the '/api/get-browser-snapshot' endpoint to retrieve the contents of '/etc/passwd'.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Devika v1
No auth needed
Prerequisites: Network access to the vulnerable Devika instance
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Nuclei Templates (1)

Devika v1 - Path Traversal
CRITICALby s4e-io,alpernae
FOFA: icon_hash="-1429839495"

Scores

CVSS v3 9.1
EPSS 0.1141
EPSS Percentile 95.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-22
Status published
Products (1)
stitionai/devika 1.0
Published Jul 24, 2024
Tracked Since Feb 18, 2026