---
id: "CVE-2024-8769"
kind: "vulnerability"
aliases: ["CVE-2024-8769", "GHSA-4qcx-jx49-6qrh"]
title: "Aim path traversal in LockManager.release_locks"
severity: "critical"
cvss: 9.1
epss: 0.00927
exploited: false
status: "open"
category: "package"
products: [{"name": "aim", "fixed": [], "affected": ">= 3.15.0, <= 3.27.0", "ecosystem": "pypi"}, {"name": "aimstack aim", "fixed": ["3.24.0"], "affected": "< 3.24.0", "ecosystem": "vendor"}]
ecosystems: ["pypi", "vendor"]
tags: ["aim", "cwe-22", "cwe-29", "ml-tracking", "package", "python", "self-hosted"]
not_affected_if: ["default-config"]
published_at: "2025-03-20T10:15:44+00:00"
first_seen_at: "2026-10-26T20:56:17+00:00"
updated_at: "2026-10-26T21:20:32+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-4qcx-jx49-6qrh", "first_seen_at": "2026-10-26T20:56:17+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8769", "first_seen_at": "2026-10-26T21:20:32+00:00"}]
---

# Aim path traversal in LockManager.release_locks

Aim's LockManager.release_locks builds a file path from a user-supplied run_hash without normalization, so relative path sequences escape the intended directory. An attacker who can reach the Aim tracking server's instruction API can delete any file the server process can remove.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- pypi:aim affected >= 3.15.0, <= 3.27.0 fixed ?
- vendor:aimstack aim affected < 3.24.0 fixed 3.24.0

## How to check

- Run `pip show aim` and check whether the installed version is between `3.15.0` and `3.27.0` inclusive.
- Check whether the tracking server (`aim up`) is reachable from untrusted networks.

## Fix

- Upgrade the `aim` package to a version newer than `3.27.0` (fixed version not stated in the sources; check the GHSA advisory).
- Restrict network access to the Aim tracking server until upgraded.

## Timeline

- 2026-10-26T20:56:17+00:00 ghsa https://github.com/advisories/GHSA-4qcx-jx49-6qrh
- 2026-10-26T21:20:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-8769

## From the sources

A vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file deletion through relative path traversal. The `run_hash` parameter, which is user-controllable, is concatenated without normalization as part of a path used to specify file deletion. This vulnerability is exposed through the `Repo._close_run()` method, which is accessible via the tracking server instruction API. As a result, an attacker can exploit this to delete any arbitrary file on the machine running the tracking server.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_