Skip to contentLollms Web Ui vulnerabilities
- parisneo lollms-webui, lollms web ui +1 moreLoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpointCVE-2026-33340Public exploitEPSS 22.1%9.1 Critical
- parisneo parisneo/lollms-webui, lollms web ui +1 moreSSRF in parisneo/lollms-webuiCVE-2024-127667.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 moreDenial of Service (DoS) via Multipart Boundary in parisneo/lollms-webuiCVE-2024-87367.1 High
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal in parisneo/lollms-webuiCVE-2024-88986.7 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 moreInsufficient Patch Leading to DoS in parisneo/lollms-webuiCVE-2025-14517.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 moreCross-site Scripting (XSS) in parisneo/lollms-webuiCVE-2024-69865.5 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal and OS Command Injection in parisneo/lollms-webuiCVE-2024-100196.3 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 moreUnrestricted File Upload and Execution in parisneo/lollms-webuiCVE-2024-99206.6 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 moreMissing Authentication Check in parisneo/lollms-webuiCVE-2024-99198.4 High
- parisneo parisneo/lollms, lollms web ui +1 moreRelative Path Traversal in parisneo/lollms-webuiCVE-2024-70584.4 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 moreDirectory Listing Vulnerability in parisneo/lollms-webuiCVE-2024-100475.3 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal in parisneo/lollms-webuiCVE-2024-85819.1 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCSRF Vulnerability in parisneo/lollms-webuiCVE-2024-66734.4 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreData Leak through CORS Misconfiguration in parisneo/lollms-webuiCVE-2024-66748.1 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreDenial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webuiCVE-2024-69597.1 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreLocal File Inclusion in parisneo/lollms-webuiCVE-2024-63947.5 High
- parisneo lollms-webui, parisneo/lollms, lollms web ui +2 moreMissing client_id in parisneo/lollms-webuiCVE-2024-60404.4 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreRemote Code Execution in parisneo/lollms-webuiCVE-2024-48978.4 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCross-site Scripting (XSS) in parisneo/lollms-webuiCVE-2024-59336.1 Medium
- parisneo parisneo/lollms-webui, lollms web ui, parisneo parisneo\/lollms-webui +2 moreAbsolute Path Traversal in parisneo/lollms-webuiCVE-2024-62507.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal and RFI Vulnerability in parisneo/lollms-webuiCVE-2024-44987.7 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreImproper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webuiCVE-2024-23599.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal leading to Remote Code Execution in parisneo/lollms-webuiCVE-2024-23609.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal in parisneo/lollms-webuiCVE-2024-33228.4 High
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal and Denial of Service in parisneo/lollms-webuiCVE-2024-1873EPSS 13.4%8.2 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCSRF File Upload Vulnerability in parisneo/lollms-webuiCVE-2024-22888.3 High
- parisneo lollms, parisneo/lollms-webui, lollms web ui +2 moreRemote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webuiCVE-2024-4320Public exploitEPSS 34.4%9.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webuiCVE-2024-26249.4 Critical
- parisneo parisneo/lollms-webui, lollms web ui, parisneo parisneo\/lollms-webui +2 morePath Traversal in parisneo/lollms-webuiCVE-2024-25487.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal in parisneo/lollms-webuiCVE-2024-23629.1 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreSSRF in add_webpage endpoint in parisneo/lollms-webuiCVE-2024-54827.4 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal Vulnerability in parisneo/lollms-webuiCVE-2024-21787.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal in parisneo/lollms-webuiCVE-2024-43304.0 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreArbitrary Upload & Read via Path Traversal in parisneo/lollms-webuiCVE-2024-23619.6 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreRemote Code Execution in parisneo/lollms-webuiCVE-2024-23669.0 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal in parisneo/lollms-webuiCVE-2024-3435Public exploit8.4 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreRemote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webuiCVE-2024-43269.8 Critical
- parisneo parisneo/lollms-webui, lollms web ui +1 moreCommand Injection in parisneo/lollms-webuiCVE-2024-31268.4 High
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal in parisneo/lollms-webuiCVE-2024-4322Public exploitEPSS 30.8%7.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal leading to Remote Code Execution in parisneo/lollms-webuiCVE-2024-23589.8 Critical
- parisneo parisneo/lollms-webui, lollms web ui +1 moreStored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webuiCVE-2024-22997.4 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreStored XSS leading to RCE in parisneo/lollms-webuiCVE-2024-16028.8 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreOS Command Injection in parisneo/lollms-webuiCVE-2024-1520EPSS 48.2%9.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal Vulnerability in parisneo/lollms-webuiCVE-2024-15119.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreLocal File Inclusion in parisneo/lollms-webuiCVE-2024-1600EPSS 32.5%9.3 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCross-Site Request Forgery (CSRF) Leading to Remote Code Execution in parisneo/lollms-webuiCVE-2024-15228.8 High