{"kind": "product", "path": "vulns/pypi/lollms", "name": "lollms", "product": "lollms", "ecosystem": "PyPI", "items": [{"id": "CVE-2026-1116", "noindex": false, "published": "2026-04-12T02:22:52.389Z", "modified": "2026-04-13T17:49:36.132Z", "cvss": 8.2, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "severity": "high", "epss": 0.00258, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-1116", "title": "Cross-site Scripting (XSS) in parisneo/lollms", "description": "A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack of sanitization or HTML encoding of the `content` field when deserializing user-provided data. This allows an attacker to inject malicious HTML or JavaScript payloads, which can be executed in the context of another user's browser. Exploitation of this vulnerability can lead to account takeover, session hijacking, or wormable attacks.", "references": ["https://huntr.com/bounties/d3d076a7-2a51-4e07-8d0e-91e28e76788e", "https://github.com/parisneo/lollms/commit/9767b882dbc893c388a286856beeaead69b8292a", "https://nvd.nist.gov/vuln/detail/CVE-2026-1116"], "fixes": ["2.1.1"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-1115", "noindex": false, "published": "2026-04-10T06:23:13.463Z", "modified": "2026-04-10T13:01:44.634Z", "cvss": 9.6, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.01261, "kev": false, "exploits": ["nuclei"], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-1115", "title": "Stored XSS in parisneo/lollms", "description": "A Stored Cross-Site Scripting (XSS) vulnerability was identified in the social feature of parisneo/lollms, affecting the latest version prior to 2.2.0. The vulnerability exists in the `create_post` function within `backend/routers/social/__init__.py`, where user-provided content is directly assigned to the `DBPost` model without sanitization. This allows attackers to inject and store malicious JavaScript, which is executed in the browsers of users viewing the Home Feed, including administrators. This can lead to account takeover, session hijacking, and wormable attacks. The issue is resolved in version 2.2.0.", "references": ["https://huntr.com/bounties/099aa4fe-7165-4337-889c-3fb4f1aa71aa", "https://github.com/parisneo/lollms/commit/9767b882dbc893c388a286856beeaead69b8292a", "https://nvd.nist.gov/vuln/detail/CVE-2026-1115"], "fixes": ["2.2.0"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-1163", "noindex": false, "published": "2026-04-08T02:20:50.573Z", "modified": "2026-04-08T15:58:36.451Z", "cvss": 4.1, "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "severity": "medium", "epss": 0.00227, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-1163", "title": "Insufficient Session Expiration in parisneo/lollms", "description": "An insufficient session expiration vulnerability exists in the latest version of parisneo/lollms. The application fails to invalidate active sessions after a password reset, allowing an attacker to continue using an old session token. This issue arises due to the absence of logic to reject requests after a period of inactivity and the excessively long default session duration of 31 days. The vulnerability enables an attacker to maintain persistent access to a compromised account, even after the victim resets their password.", "references": ["https://huntr.com/bounties/abe2d1c4-c21c-4608-8a8e-274565246a8b", "https://nvd.nist.gov/vuln/detail/CVE-2026-1163"], "fixes": [], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-1114", "noindex": false, "published": "2026-04-07T06:19:05.270Z", "modified": "2026-04-07T13:20:46.279Z", "cvss": 9.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.0054, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-1114", "title": "Improper Access Control via Weak JWT Token in parisneo/lollms", "description": "In parisneo/lollms version 2.1.0, the application's session management is vulnerable to improper access control due to the use of a weak secret key for signing JSON Web Tokens (JWT). This vulnerability allows an attacker to perform an offline brute-force attack to recover the secret key. Once the secret key is obtained, the attacker can forge administrative tokens by modifying the JWT payload and resigning it with the cracked secret. This enables unauthorized users to escalate privileges, impersonate the administrator, and gain access to restricted endpoints. The issue is resolved in version 2.2.0.", "references": ["https://huntr.com/bounties/608b2a3b-2225-438e-9e61-ffbfdec2ed89", "https://github.com/parisneo/lollms/commit/a3b2b82b84d537a9da63e63a370a6a8ad55fed34", "https://nvd.nist.gov/vuln/detail/CVE-2026-1114"], "fixes": ["2.2.0"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}, {"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-0558", "noindex": false, "published": "2026-03-29T17:53:08.003Z", "modified": "2026-03-30T15:23:41.471Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "severity": "high", "epss": 0.02047, "kev": false, "exploits": ["nuclei"], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-0558", "title": "Unauthenticated File Upload in parisneo/lollms", "description": "A vulnerability in parisneo/lollms, up to and including version 2.2.0, allows unauthenticated users to upload and process files through the `/api/files/extract-text` endpoint. This endpoint does not enforce authentication, unlike other file-related endpoints, and lacks the `Depends(get_current_active_user)` dependency. This issue can lead to denial of service (DoS) through resource exhaustion, information disclosure, and violation of the application's documented security policies.", "references": ["https://huntr.com/bounties/0a722001-89ce-4c91-b6a6-a55ee5ba2113", "https://github.com/parisneo/lollms/commit/a6625dc83786ff21d109b0d545ca61b770607ef3", "https://nvd.nist.gov/vuln/detail/CVE-2026-0558"], "fixes": ["2.1.1"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-0560", "noindex": false, "published": "2026-03-29T17:51:20.708Z", "modified": "2026-03-30T15:33:31.963Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.01765, "kev": false, "exploits": ["nuclei"], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-0560", "title": "Server-Side Request Forgery (SSRF) in parisneo/lollms", "description": "A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the `/api/files/export-content` endpoint. The `_download_image_to_temp()` function in `backend/routers/files.py` fails to validate user-controlled URLs, allowing attackers to make arbitrary HTTP requests to internal services and cloud metadata endpoints. This vulnerability can lead to internal network access, cloud metadata access, information disclosure, port scanning, and potentially remote code execution.", "references": ["https://huntr.com/bounties/65e43a5e-b902-4369-b738-1825285a3ea5", "https://github.com/parisneo/lollms/commit/76a54f0df2df8a5b254aa627d487b5dc939a0263", "https://nvd.nist.gov/vuln/detail/CVE-2026-0560"], "fixes": ["2.1.1"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-0562", "noindex": false, "published": "2026-03-29T17:49:44.461Z", "modified": "2026-04-22T14:57:21.275Z", "cvss": 8.3, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "severity": "high", "epss": 0.00273, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-0562", "title": "Insecure Direct Object Reference (IDOR) in parisneo/lollms", "description": "A critical security vulnerability in parisneo/lollms versions up to 2.2.0 allows any authenticated user to accept or reject friend requests belonging to other users. The `respond_request()` function in `backend/routers/friends.py` does not implement proper authorization checks, enabling Insecure Direct Object Reference (IDOR) attacks. Specifically, the `/api/friends/requests/{friendship_id}` endpoint fails to verify whether the authenticated user is part of the friendship or the intended recipient of the request. This vulnerability can lead to unauthorized access, privacy violations, and potential social engineering attacks. The issue has bee", "references": ["https://huntr.com/bounties/6aab01ca-a138-4a1d-bef9-3bce145359bf", "https://github.com/parisneo/lollms/commit/c46297799f8e1e23305373f8350746b905e0e83c", "https://aydinnyunus.github.io/2026/04/18/idor-lollms-friend-request-cve-2026-0562/"], "fixes": ["2.1.1"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-1117", "noindex": false, "published": "2026-02-02T09:55:26.972Z", "modified": "2026-02-02T17:49:47.974Z", "cvss": 8.2, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "severity": "high", "epss": 0.00585, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-1117", "title": "Improper Access Control in parisneo/lollms", "description": "A vulnerability in the `lollms_generation_events.py` component of parisneo/lollms version 5.9.0 allows unauthenticated access to sensitive Socket.IO events. The `add_events` function registers event handlers such as `generate_text`, `cancel_generation`, `generate_msg`, and `generate_msg_from` without implementing authentication or authorization checks. This allows unauthenticated clients to execute resource-intensive or state-altering operations, leading to potential denial of service, state corruption, and race conditions. Additionally, the use of global flags (`lollmsElfServer.busy`, `lollmsElfServer.cancel_gen`) for state management in a m", "references": ["https://huntr.com/bounties/d2846a7f-0140-4105-b1bb-5ef64ec8b829", "https://github.com/parisneo/lollms/commit/36a5b513dfefe9c2913bf9b618457b4fea603e3b", "https://nvd.nist.gov/vuln/detail/CVE-2026-1117"], "fixes": ["2.1.0"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-6386", "noindex": false, "published": "2025-07-07T09:55:20.059Z", "modified": "2025-07-07T14:22:50.915Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.00408, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-6386", "title": "Timing Attack Vulnerability in parisneo/lollms", "description": "The parisneo/lollms repository is affected by a timing attack vulnerability in the `authenticate_user` function within the `lollms_authentication.py` file. This vulnerability allows attackers to enumerate valid usernames and guess passwords incrementally by analyzing response time differences. The affected version is the latest, and the issue is resolved in version 20.1. The vulnerability arises from the use of Python's default string equality operator for password comparison, which compares characters sequentially and exits on the first mismatch, leading to variable response times based on the number of matching initial characters.", "references": ["https://huntr.com/bounties/6da05485-d219-4f18-9ffc-991053524b67", "https://github.com/parisneo/lollms/commit/f78437f7b5aa39a78c6201912faf4e0645a38c48", "https://nvd.nist.gov/vuln/detail/CVE-2025-6386"], "fixes": [], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6982", "noindex": false, "published": "2025-03-20T10:10:31.983Z", "modified": "2025-03-20T18:20:14.175Z", "cvss": 8.4, "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.0046, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6982", "title": "Remote Code Execution in Calculate Function in parisneo/lollms", "description": "A remote code execution vulnerability exists in the Calculate function of parisneo/lollms version 9.8. The vulnerability arises from the use of Python's `eval()` function to evaluate mathematical expressions within a Python sandbox that disables `__builtins__` and only allows functions from the `math` module. This sandbox can be bypassed by loading the `os` module using the `_frozen_importlib.BuiltinImporter` class, allowing an attacker to execute arbitrary commands on the server. The issue is fixed in version 9.10.", "references": ["https://huntr.com/bounties/4f8e73ac-aaaf-4d5c-a6dd-58215b5a7fea", "https://github.com/parisneo/lollms/commit/30e7eaba2ccfb751a81e7cb29fdef2ae8ffa6832", "https://nvd.nist.gov/vuln/detail/CVE-2024-6982"], "fixes": ["11.0.0"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6581", "noindex": false, "published": "2024-10-29T12:49:01.555Z", "modified": "2024-10-29T13:24:02.586Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", "severity": "medium", "epss": 0.00654, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6581", "title": "Remote Code Execution due to Stored XSS in parisneo/lollms", "description": "A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this can lead to cross-site scripting (XSS) vulnerabilities, which in turn pose a risk of remote code execution. The sanitize_svg function only removes script elements and 'on*' event attributes, but does not account for other potential vectors for XSS within SVG files. This vulnerability can be exploited when authorized users access a malicious URL containing the crafted SVG file.", "references": ["https://huntr.com/bounties/ad68ecd6-44e2-449b-8e7e-f2b71b1b43c7", "https://github.com/parisneo/lollms/commit/328b960a0de2097e13654ac752253e9541521ddd", "https://nvd.nist.gov/vuln/detail/CVE-2024-6581"], "fixes": [], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}, {"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6985", "noindex": false, "published": "2024-10-11T15:38:08.686Z", "modified": "2024-10-11T16:14:37.424Z", "cvss": 4.4, "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00355, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6985", "title": "Path Traversal in api open_personality_folder in parisneo/lollms-webui", "description": "A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personality_folder on the victim's computer, even though sanitize_path is set. The issue arises due to improper sanitization of the personality_folder parameter, which can be exploited to traverse directories and access arbitrary files.", "references": ["https://huntr.com/bounties/79c11579-47d8-4e68-8466-b47c3bf5ef6a", "https://github.com/parisneo/lollms/commit/28ee567a9a120967215ff19b96ab7515ce469620", "https://nvd.nist.gov/vuln/detail/CVE-2024-6985"], "fixes": ["5.9.0"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}, {"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6971", "noindex": false, "published": "2024-10-11T12:14:13.156Z", "modified": "2024-10-11T14:34:23.637Z", "cvss": 3.4, "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L", "severity": "low", "epss": 0.00319, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6971", "title": "Path Traversal in parisneo/lollms-webui", "description": "A path traversal vulnerability exists in the parisneo/lollms-webui repository, specifically in the `lollms_file_system.py` file. The functions `add_rag_database`, `toggle_mount_rag_database`, and `vectorize_folder` do not implement security measures such as `sanitize_path_from_endpoint` or `sanitize_path`. This allows an attacker to perform vectorize operations on `.sqlite` files in any directory on the victim's computer, potentially installing multiple packages and causing a crash.", "references": ["https://huntr.com/bounties/fbfe7cd0-99fb-4305-bd07-8b573364109e", "https://nvd.nist.gov/vuln/detail/CVE-2024-6971"], "fixes": [], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6281", "noindex": false, "published": "2024-07-20T03:19:25.663Z", "modified": "2025-10-15T12:50:33.120Z", "cvss": 7.3, "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "severity": "high", "epss": 0.00265, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6281", "title": "Path Traversal in parisneo/lollms", "description": "A path traversal vulnerability exists in the `apply_settings` function of parisneo/lollms versions prior to 9.5.1. The `sanitize_path` function does not adequately secure the `discussion_db_name` parameter, allowing attackers to manipulate the path and potentially write to important system folders.", "references": ["https://huntr.com/bounties/0a62f2fb-4e62-4128-9dc4-e8f1d959ac61", "https://github.com/parisneo/lollms/commit/26a3ff35acf152b49e1087d5698ad4864c7b6092", "https://nvd.nist.gov/vuln/detail/CVE-2024-6281"], "fixes": ["9.5.1"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6139", "noindex": false, "published": "2024-06-27T18:45:54.046Z", "modified": "2024-08-01T21:33:04.959Z", "cvss": 7.3, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "severity": "high", "epss": 0.00524, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6139", "title": "Path Traversal in parisneo/lollms", "description": "A path traversal vulnerability exists in the XTTS server of the parisneo/lollms package version v9.6. This vulnerability allows an attacker to write audio files to arbitrary locations on the system and enumerate file paths. The issue arises from improper validation of user-provided file paths in the `tts_to_file` endpoint.", "references": ["https://huntr.com/bounties/fd00f112-efd0-40a1-8227-d6733716e4c0", "https://nvd.nist.gov/vuln/detail/CVE-2024-6139"], "fixes": [], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-5824", "noindex": false, "published": "2024-06-27T18:45:26.668Z", "modified": "2024-08-01T21:25:03.266Z", "cvss": 7.4, "cvss_vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00448, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-5824", "title": "Path Traversal in parisneo/lollms", "description": "A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`.", "references": ["https://huntr.com/bounties/9ceb7cf9-a7cd-4699-b3f8-d0999d2b49fd", "https://github.com/parisneo/lollms/commit/eda3af5f5c4ea9b2f3569f72f8d05989e29367fc", "https://nvd.nist.gov/vuln/detail/CVE-2024-5824"], "fixes": ["9.5.0"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6085", "noindex": false, "published": "2024-06-27T18:45:15.903Z", "modified": "2024-08-01T21:25:03.365Z", "cvss": 8.6, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "severity": "high", "epss": 0.00644, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6085", "title": "Path Traversal in parisneo/lollms", "description": "A path traversal vulnerability exists in the XTTS server included in the lollms package, version v9.6. This vulnerability arises from the ability to perform an unauthenticated root folder settings change. Although the read file endpoint is protected against path traversals, this protection can be bypassed by changing the root folder to '/'. This allows attackers to read arbitrary files on the system. Additionally, the output folders can be changed to write arbitrary audio files to any location on the system.", "references": ["https://huntr.com/bounties/d2fb73d7-4b4f-451a-8763-484c189a27fe", "https://nvd.nist.gov/vuln/detail/CVE-2024-6085"], "fixes": [], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-3121", "noindex": false, "published": "2024-06-24T00:00:14.165Z", "modified": "2024-08-01T19:32:42.719Z", "cvss": 6.8, "cvss_vector": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "medium", "epss": 0.00446, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-3121", "title": "Remote Code Execution in create_conda_env function in parisneo/lollms", "description": "A remote code execution vulnerability exists in the create_conda_env function of the parisneo/lollms repository, version 5.9.0. The vulnerability arises from the use of shell=True in the subprocess.Popen function, which allows an attacker to inject arbitrary commands by manipulating the env_name and python_version parameters. This issue could lead to a serious security breach as demonstrated by the ability to execute the 'whoami' command among potentially other harmful commands.", "references": ["https://huntr.com/bounties/db57c343-9b80-4c1c-9ab0-9eef92c9b27b", "https://nvd.nist.gov/vuln/detail/CVE-2024-3121"], "fixes": [], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-5443", "noindex": false, "published": "2024-06-22T16:12:32.499Z", "modified": "2024-08-01T21:11:12.805Z", "cvss": 9.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.01164, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-5443", "title": "Remote Code Execution via Path Traversal in parisneo/lollms", "description": "CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the `ExtensionBuilder().build_extension()` function. The vulnerability arises from the `/mount_extension` endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure. This is facilitated by the `data.category` and `data.folder` parameters accepting empty strings (`\"\"`), which, due to inadequate input sanitization, can lead to the construction of a `package_path` that points to the root directory. Consequently, if an attacker can create a `config.yaml` file in a controllable path, this path can be appende", "references": ["https://huntr.com/bounties/db52848a-4dbe-4110-a981-03739834bf45", "https://github.com/parisneo/lollms/commit/2d0c4e76be93195836ecd0948027e791b8a2626f", "https://nvd.nist.gov/vuln/detail/CVE-2024-5443"], "fixes": ["9.5.1"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-4315", "noindex": false, "published": "2024-06-12T00:40:15.768Z", "modified": "2025-10-15T12:50:24.257Z", "cvss": 9.1, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "severity": "critical", "epss": 0.01024, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-4315", "title": "LFI Vulnerability due to Lack of Path Sanitization in parisneo/lollms", "description": "parisneo/lollms version 9.5 is vulnerable to Local File Inclusion (LFI) attacks due to insufficient path sanitization. The `sanitize_path_from_endpoint` function fails to properly sanitize Windows-style paths (backward slash `\\`), allowing attackers to perform directory traversal attacks on Windows systems. This vulnerability can be exploited through various routes, including `personalities` and `/del_preset`, to read or delete any file on the Windows filesystem, compromising the system's availability.", "references": ["https://huntr.com/bounties/8a1b0197-2c36-4276-b92b-630a2a9bb09c", "https://github.com/parisneo/lollms/commit/95ad36eeffc6a6be3e3f35ed35a384d768f0ecf6", "https://nvd.nist.gov/vuln/detail/CVE-2024-4315"], "fixes": ["9.5.0"], "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}]}], "total": 24, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "lollms", "path": "vulns/pypi/lollms", "ecosystem": "PyPI"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-04-22T14:57:21.275Z", "early_advisories": [], "license": "Sie dürfen die Auswahl von PatchFirst und unsere Ergänzungen (Prioritäten, Frühwarnungen, Texte, Zusammenfassungen und Aggregate) für eigene Zwecke einschließlich interner geschäftlicher Aufgaben frei nutzen. Weiterverkauf, kommerzielle Verbreitung und massenhafte Spiegelung dieser Auswahl oder Ergänzungen erfordern eine schriftliche Vereinbarung mit dem Betreiber. Nennen Sie bei jeder Nutzung oder Veröffentlichung der Auswahl oder unserer Ergänzungen PatchFirst (https://patchfirst.dev/vulns/) mit diesem Link zur Feedseite Ihrer Region als Quelle. Originaleinträge aus offenen Quellen unterliegen weiterhin ihren jeweiligen Lizenzen und Bedingungen. Diese Bedingungen beschränken Ihre Rechte an den Originaldaten nicht, die Sie direkt bei den Quellen beziehen können.", "terms_url": "https://patchfirst.dev/de/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst wählt Einträge aus, normalisiert und kombiniert sie; Zusammenfassungen und Übersetzungen können hinzukommen. Nachrichten werden im jeweiligen Eintrag mit einem Link zur Originalquelle belegt.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Die Lizenzen der Ursprungsdatenbanken unterscheiden sich; siehe Quellenkatalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Frei zugängliche Bewertungen; Quellenangabe erbeten (FIRST EPSS, Bewertungen von Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}