Read the docs
TI-2024-04537 Aliases CVE-2024-4881GHSA-p8h7-c8gw-6x8c

Path Traversal in parisneo/lollms

Priority HIGH 72CWE-36Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-22 and the CVSS impact.

Summary

A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlier versions, but fixed in version 5.9.0. The vulnerability arises due to improper validation of file paths between Windows and Linux environments, allowing attackers to traverse beyond the intended directory and read any file on the Windows system. Specifically, the application fails to adequately sanitize file paths containing backslashes (`\`), which can be exploited to access the root directory and read, or even delete, sensitive files. This issue was discovered in the context of the `/user_infos` endpoint, where a crafted request using backslashes to reference a file (e.g., `\windows\win.ini`) could result in unauthorized file access. The impact of this vulnerability includes the potential for attackers to access sensitive information such as environment variables, database files, and configuration files, which could lead to further compromise of the system.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00881 59th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed parisneo/lollms (parisneo): 5.9.0lollms (PyPI): 9.5.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
parisneoparisneo/lollmsbefore 5.9.05.9.0Patch availableCNA
—lollms (PyPI)before 9.5.09.5.0Patch availableGHSA-p8h7-c8gw-6x8c
  • parisneo/lollms Vendorparisneo Affected before 5.9.0 Fixed in 5.9.0 Patch available CNA
  • lollms (PyPI) Vendor— Affected before 9.5.0 Fixed in 9.5.0 Patch available GHSA-p8h7-c8gw-6x8c

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:lollms:lollms:*:*:*:*:*:*:*:*before 5.9.0VulnerableLollms
  • cpe:2.3:a:lollms:lollms:*:*:*:*:*:*:*:* Versions before 5.9.0 Vulnerable ·Lollms

Remediation

  • Fix · CNA parisneo/lollms (parisneo) Fixed in 5.9.0
  • Fix · GHSA-p8h7-c8gw-6x8c lollms (PyPI) Fixed in 9.5.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-4881
  2. 2026-10-03 Alias added: GHSA-p8h7-c8gw-6x8c

References

Exploit 1

Patch 1

Advisory 1

Other 1

  • TI-2026-00842 Improper Access Control via Weak JWT Token in parisneo/lollms CVSS 3.0CRITICAL 9.8
  • TI-2024-05059 Remote Code Execution via Path Traversal in parisneo/lollms CVSS 3.0CRITICAL 9.8
  • TI-2024-04029 Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webui CVSS 3.0CRITICAL 9.8
  • TI-2024-04023 Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui CVSS 3.1CRITICAL 9.8
  • TI-2024-03798 Arbitrary Code Execution in parisneo/lollms CVSS 3.0CRITICAL 9.8
  • TI-2024-02196 Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui CVSS 3.0CRITICAL 9.6
See all 83 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences