Predictable /tmp Symlink Clobbering in Install & Hook Scripts (akitaonrails/ai-memory)

0x01 // Advisory Summary

ai-memory (< 3.3.2) used predictable, fixed temporary file paths in /tmp across installation and runtime hook scripts without O_NOFOLLOW or mktemp isolation, enabling local symlink arbitrary file overwrite and denial of service.

0x02 // Affected Versions & Remediation

• Repository: akitaonrails/ai-memory
• Affected Versions: < 3.3.2
• Patched Versions: 3.3.2
• CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
• Reporter Credit: Serhii Shunko (@ccsimplyspolit)

0x03 // Canonical Verification Links

• Official GitHub Security Advisory: https://github.com/akitaonrails/ai-memory/security/advisories/GHSA-jr85-7366-xrm2
• Reporter Profile: https://github.com/ccsimplyspolit