Lollms vulnerabilities

Products

• Web Ui 46
• Lollms 12
• Lollms-webui 9

Newest

• lollms, parisneo parisneo/lollms +1 more Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms CVE-2026-12228 8.7 HighJuly 18, 2026
• lollms, parisneo parisneo/lollms +1 more Cross-site Scripting (XSS) in parisneo/lollms CVE-2026-1116 Fix available 8.2 HighApril 12, 2026
• lollms, parisneo parisneo/lollms +1 more Stored XSS in parisneo/lollms CVE-2026-1115 Fix available 9.6 CriticalApril 10, 2026
• lollms, parisneo parisneo/lollms +1 more Improper Access Control via Weak JWT Token in parisneo/lollms CVE-2026-1114 Fix available 9.8 CriticalApril 7, 2026
• lollms, parisneo parisneo/lollms +1 more Unauthenticated File Upload in parisneo/lollms CVE-2026-0558 Fix available 7.5 HighMarch 29, 2026
• lollms, parisneo parisneo/lollms +1 more Server-Side Request Forgery (SSRF) in parisneo/lollms CVE-2026-0560 Fix available 7.5 HighMarch 29, 2026
• lollms, parisneo parisneo/lollms +1 more Insecure Direct Object Reference (IDOR) in parisneo/lollms CVE-2026-0562 Fix available 8.3 HighMarch 29, 2026
• parisneo lollms-webui, lollms web ui +1 more LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint CVE-2026-33340 Public exploit EPSS 21.6% 9.1 CriticalMarch 24, 2026
• parisneo parisneo/lollms-webui, lollms web ui +1 more SSRF in parisneo/lollms-webui CVE-2024-12766 7.5 HighMarch 20, 2025
• parisneo parisneo/lollms-webui, lollms web ui +1 more Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui CVE-2024-8736 7.1 HighMarch 20, 2025
• parisneo parisneo/lollms-webui, lollms web ui +1 more Path Traversal in parisneo/lollms-webui CVE-2024-8898 6.7 MediumMarch 20, 2025
• parisneo parisneo/lollms-webui, lollms web ui +1 more Insufficient Patch Leading to DoS in parisneo/lollms-webui CVE-2025-1451 7.5 HighMarch 20, 2025
• parisneo parisneo/lollms-webui, lollms web ui +1 more Cross-site Scripting (XSS) in parisneo/lollms-webui CVE-2024-6986 5.5 MediumMarch 20, 2025
• parisneo parisneo/lollms-webui, lollms web ui +1 more Path Traversal and OS Command Injection in parisneo/lollms-webui CVE-2024-10019 6.3 MediumMarch 20, 2025
• parisneo parisneo/lollms-webui, lollms web ui +1 more Unrestricted File Upload and Execution in parisneo/lollms-webui CVE-2024-9920 6.6 MediumMarch 20, 2025
• parisneo parisneo/lollms-webui, lollms web ui +1 more Missing Authentication Check in parisneo/lollms-webui CVE-2024-9919 8.4 HighMarch 20, 2025
• parisneo parisneo/lollms, lollms web ui +1 more Relative Path Traversal in parisneo/lollms-webui CVE-2024-7058 4.4 MediumMarch 20, 2025
• parisneo parisneo/lollms-webui, lollms web ui +1 more Directory Listing Vulnerability in parisneo/lollms-webui CVE-2024-10047 5.3 MediumMarch 20, 2025
• parisneo parisneo/lollms-webui, lollms web ui +1 more Path Traversal in parisneo/lollms-webui CVE-2024-8581 9.1 CriticalMarch 20, 2025
• lollms lollms-webui, parisneo parisneo/lollms-webui +1 more XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui CVE-2024-5125 7.3 HighNovember 14, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more CSRF Vulnerability in parisneo/lollms-webui CVE-2024-6673 4.4 MediumOctober 29, 2024
• parisneo lollms, parisneo/lollms, lollms lord of large language models +2 more Remote Code Execution due to Stored XSS in parisneo/lollms CVE-2024-6581 Fix available 6.5 MediumOctober 29, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Data Leak through CORS Misconfiguration in parisneo/lollms-webui CVE-2024-6674 8.1 HighOctober 29, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui CVE-2024-6959 7.1 HighOctober 13, 2024
• lollms, parisneo parisneo/lollms +1 more Path Traversal in api open_personality_folder in parisneo/lollms-webui CVE-2024-6985 Fix available 4.4 MediumOctober 11, 2024
• lollms lollms-webui, parisneo lollms, parisneo/lollms +2 more Path Traversal in parisneo/lollms-webui CVE-2024-6971 3.4 LowOctober 11, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Local File Inclusion in parisneo/lollms-webui CVE-2024-6394 7.5 HighSeptember 30, 2024
• parisneo lollms-webui, parisneo/lollms, lollms web ui +2 more Missing client_id in parisneo/lollms-webui CVE-2024-6040 4.4 MediumAugust 1, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Remote Code Execution in parisneo/lollms-webui CVE-2024-4897 8.4 HighJuly 2, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Cross-site Scripting (XSS) in parisneo/lollms-webui CVE-2024-5933 6.1 MediumJune 27, 2024
• parisneo parisneo/lollms-webui, lollms web ui, parisneo parisneo\/lollms-webui +2 more Absolute Path Traversal in parisneo/lollms-webui CVE-2024-6250 7.5 HighJune 27, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal and RFI Vulnerability in parisneo/lollms-webui CVE-2024-4498 7.7 HighJune 25, 2024
• lollms lollms-webui, parisneo parisneo/lollms-webui +1 more CSRF in Servers Configurations in parisneo/lollms-webui CVE-2024-4839 4.4 MediumJune 24, 2024
• lollms, parisneo parisneo/lollms, lollms-webui +2 more CSRF Vulnerability in parisneo/lollms XTTS Server CVE-2024-4499 7.6 HighJune 24, 2024
• lollms, parisneo parisneo/lollms +1 more Remote Code Execution in create_conda_env function in parisneo/lollms CVE-2024-3121 Public exploit 6.8 MediumJune 24, 2024
• lollms lollms-webui, parisneo parisneo/lollms-webui +1 more Path Traversal in parisneo/lollms-webui CVE-2024-4841 4.0 MediumJune 23, 2024
• lollms lollms-webui, parisneo parisneo/lollms-webui +1 more CSRF in restart_program in parisneo/lollms-webui CVE-2024-4403 4.4 MediumJune 10, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui CVE-2024-2359 9.8 CriticalJune 6, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal leading to Remote Code Execution in parisneo/lollms-webui CVE-2024-2360 9.8 CriticalJune 6, 2024
• lollms, parisneo parisneo/lollms, lollms-webui +2 more Path Traversal in parisneo/lollms CVE-2024-3429 Fix available EPSS 28.3% 9.8 CriticalJune 6, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal in parisneo/lollms-webui CVE-2024-3322 8.4 HighJune 6, 2024
• parisneo parisneo/lollms-webui, lollms web ui +1 more Path Traversal and Denial of Service in parisneo/lollms-webui CVE-2024-1873 EPSS 13.4% 8.2 HighJune 6, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more CSRF File Upload Vulnerability in parisneo/lollms-webui CVE-2024-2288 8.3 HighJune 6, 2024
• parisneo lollms, parisneo/lollms-webui, lollms web ui +2 more Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui CVE-2024-4320 Public exploit EPSS 34.4% 9.8 CriticalJune 6, 2024
• lollms, parisneo parisneo/lollms +1 more Path Traversal in parisneo/lollms CVE-2024-4881 Fix available 7.5 HighJune 6, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui CVE-2024-2624 9.4 CriticalJune 6, 2024
• parisneo parisneo/lollms-webui, lollms web ui, parisneo parisneo\/lollms-webui +2 more Path Traversal in parisneo/lollms-webui CVE-2024-2548 7.5 HighJune 6, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal in parisneo/lollms-webui CVE-2024-2362 9.1 CriticalJune 6, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more SSRF in add_webpage endpoint in parisneo/lollms-webui CVE-2024-5482 7.4 HighJune 6, 2024
• parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Path Traversal Vulnerability in parisneo/lollms-webui CVE-2024-2178 7.5 HighJune 2, 2024
• Show olderLoading…