{"id":"CVE-2024-5443","aliases":["EUVD-2024-2113","GHSA-mvrm-fh8q-6wr2","PYSEC-2026-402"],"status":"published","title":"Remote Code Execution via Path Traversal in parisneo/lollms","description":"CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the `ExtensionBuilder().build_extension()` function. The vulnerability arises from the `/mount_extension` endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure. This is facilitated by the `data.category` and `data.folder` parameters accepting empty strings (`\"\"`), which, due to inadequate input sanitization, can lead to the construction of a `package_path` that points to the root directory. Consequently, if an attacker can create a `config.yaml` file in a controllable path, this path can be appended to the `extensions` list and trigger the execution of `__init__.py` in the current directory, leading to remote code execution. The vulnerability affects versions up to 5.9.0, and has been addressed in version 9.8.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01164,"percentile":0.67486,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-29"],"published":"2024-06-22T16:12:32Z","modified":"2026-07-01T20:22:56Z","fixes":[{"ecosystem":"PyPI","package":"lollms","fixed_in":["9.5.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"lollms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.9.0"},{"fixed":"9.5.1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"lollms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.9.0"},{"fixed":"9.5.1"}]}],"versions":["5.9.0","5.9.1","5.9.2","5.9.3","5.9.4","5.9.5","6.0.0","6.0.1","6.0.2","6.0.3","6.0.5","6.0.6","6.0.7","6.0.8","6.0.9","6.1.1","6.2.0","6.4.0","6.5.0","6.5.1","6.5.2","6.6.0","6.7.0","6.9.0","7.2.0","9.3.0","9.5.0"]},{"source":"osv","ecosystem":"PyPI","package":"lollms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.9.0"},{"fixed":"9.5.1"}]}],"versions":["5.9.0","5.9.1","5.9.2","5.9.3","5.9.4","5.9.5","6.0.0","6.0.1","6.0.2","6.0.3","6.0.5","6.0.6","6.0.7","6.0.8","6.0.9","6.1.1","6.2.0","6.4.0","6.5.0","6.5.1","6.5.2","6.6.0","6.7.0","6.9.0","7.2.0","9.3.0","9.5.0"]}],"products":[{"vendor":"parisneo","product":"lollms"},{"vendor":"parisneo","product":"parisneo/lollms"}],"references":[{"url":"https://huntr.com/bounties/db52848a-4dbe-4110-a981-03739834bf45","tags":["x_transferred","web"]},{"url":"https://github.com/parisneo/lollms/commit/2d0c4e76be93195836ecd0948027e791b8a2626f","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5443","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mvrm-fh8q-6wr2","tags":["advisory"]},{"url":"https://github.com/ParisNeo/lollms","tags":["package"]},{"url":"https://pypi.org/project/lollms","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-5443","title":"Remote Code Execution via Path Traversal in parisneo/lollms","description":"CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the `ExtensionBuilder().build_extension()` function. The vulnerability arises from the `/mount_extension` endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure. This is facilitated by the `data.category` and `data.folder` parameters accepting empty strings (`\"\"`), which, due to inadequate input sanitization, can lead to the construction of a `package_path` that points to the root directory. Consequently, if an attacker can create a `config.yaml` file in a controllable path, this path can be appended to the `extensions` list and trigger the execution of `__init__.py` in the current directory, leading to remote code execution. The vulnerability affects versions up to 5.9.0, and has been addressed in version 9.8.","status":"published","published":"2024-06-22T16:12:32.499Z","modified":"2024-08-01T21:11:12.805Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-29"],"updated_at":"2026-11-02T14:34:01.630882Z"}],"euvd":[{"id":"EUVD-2024-2113","description":"CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the `ExtensionBuilder().build_extension()` function. The vulnerability arises from the `/mount_extension` endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure. This is facilitated by the `data.category` and `data.folder` parameters accepting empty strings (`\"\"`), which, due to inadequate input sanitization, can lead to the construction of a `package_path` that points to the root directory. Consequently, if an attacker can create a `config.yaml` file in a controllable path, this path can be appended to the `extensions` list and trigger the execution of `__init__.py` in the current directory, leading to remote code execution. The vulnerability affects versions up to 5.9.0, and has been addressed in version 9.8.","status":"published","published":"2024-06-22T16:12:32Z","modified":"2024-08-01T21:11:12Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T03:50:34.650065Z"}],"ghsa":[{"id":"GHSA-mvrm-fh8q-6wr2","title":"Remote Code Execution via path traversal bypass in lollms","description":"CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the `ExtensionBuilder().build_extension()` function. The vulnerability arises from the `/mount_extension` endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure. This is facilitated by the `data.category` and `data.folder` parameters accepting empty strings (`\"\"`), which, due to inadequate input sanitization, can lead to the construction of a `package_path` that points to the root directory. Consequently, if an attacker can create a `config.yaml` file in a controllable path, this path can be appended to the `extensions` list and trigger the execution of `__init__.py` in the current directory, leading to remote code execution. The vulnerability affects versions from 5.9.0, and has been addressed in version 9.5.1.","status":"published","published":"2024-06-22T18:30:41Z","modified":"2024-06-24T21:22:51Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-29"],"updated_at":"2026-11-02T14:37:55.455438Z"}],"nvd":[{"id":"CVE-2024-5443","description":"CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the `ExtensionBuilder().build_extension()` function. The vulnerability arises from the `/mount_extension` endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure. This is facilitated by the `data.category` and `data.folder` parameters accepting empty strings (`\"\"`), which, due to inadequate input sanitization, can lead to the construction of a `package_path` that points to the root directory. Consequently, if an attacker can create a `config.yaml` file in a controllable path, this path can be appended to the `extensions` list and trigger the execution of `__init__.py` in the current directory, leading to remote code execution. The vulnerability affects versions up to 5.9.0, and has been addressed in version 9.8.","status":"published","published":"2024-06-22T17:15:34.41Z","modified":"2026-06-17T08:15:57.76Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-29"],"updated_at":"2026-11-02T14:10:07.173605Z"}],"osv":[{"id":"GHSA-mvrm-fh8q-6wr2","title":"Remote Code Execution via path traversal bypass in lollms","description":"CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the `ExtensionBuilder().build_extension()` function. The vulnerability arises from the `/mount_extension` endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure. This is facilitated by the `data.category` and `data.folder` parameters accepting empty strings (`\"\"`), which, due to inadequate input sanitization, can lead to the construction of a `package_path` that points to the root directory. Consequently, if an attacker can create a `config.yaml` file in a controllable path, this path can be appended to the `extensions` list and trigger the execution of `__init__.py` in the current directory, leading to remote code execution. The vulnerability affects versions from 5.9.0, and has been addressed in version 9.5.1.","status":"published","published":"2024-06-22T18:30:41Z","modified":"2026-06-29T12:26:31.723200435Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-29"],"updated_at":"2026-11-02T15:46:52.170928Z"},{"id":"PYSEC-2026-402","title":"Remote Code Execution via path traversal bypass in lollms","description":"CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the `ExtensionBuilder().build_extension()` function. The vulnerability arises from the `/mount_extension` endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure. This is facilitated by the `data.category` and `data.folder` parameters accepting empty strings (`\"\"`), which, due to inadequate input sanitization, can lead to the construction of a `package_path` that points to the root directory. Consequently, if an attacker can create a `config.yaml` file in a controllable path, this path can be appended to the `extensions` list and trigger the execution of `__init__.py` in the current directory, leading to remote code execution. The vulnerability affects versions from 5.9.0, and has been addressed in version 9.5.1.","status":"published","published":"2026-06-29T11:50:41.906697Z","modified":"2026-07-01T20:22:56.781723Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:57.255153Z"}]}}