Skip to contentParisneo Lollms vulnerabilities
- parisneo parisneo/lollmsPath Traversal Vulnerability in parisneo/lollmsCVE-2026-105957.5 High
- lollms, parisneo parisneo/lollms +1 moreStored XSS in Direct Messages via Prompt Sharing in parisneo/lollmsCVE-2026-122288.7 High
- lollms, parisneo parisneo/lollms +1 moreCross-site Scripting (XSS) in parisneo/lollmsCVE-2026-1116Fix available8.2 High
- lollms, parisneo parisneo/lollms +1 moreStored XSS in parisneo/lollmsCVE-2026-1115Fix available9.6 Critical
- parisneo parisneo/lollmsInsufficient Session Expiration in parisneo/lollmsCVE-2026-11634.1 Medium
- lollms, parisneo parisneo/lollms +1 moreImproper Access Control via Weak JWT Token in parisneo/lollmsCVE-2026-1114Fix available9.8 Critical
- lollms, parisneo parisneo/lollms +1 moreUnauthenticated File Upload in parisneo/lollmsCVE-2026-0558Fix available7.5 High
- lollms, parisneo parisneo/lollms +1 moreServer-Side Request Forgery (SSRF) in parisneo/lollmsCVE-2026-0560Fix available7.5 High
- lollms, parisneo parisneo/lollms +1 moreInsecure Direct Object Reference (IDOR) in parisneo/lollmsCVE-2026-0562Fix available8.3 High
- parisneo lollms-webui, lollms web ui +1 moreLoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpointCVE-2026-33340Public exploitEPSS 22.1%9.1 Critical
- parisneo parisneo/lollms-webuiRemote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webuiCVE-2024-23569.6 Critical
- parisneo parisneo/lollmsImproper Access Control in parisneo/lollmsCVE-2026-1117Fix available8.2 High
- parisneo parisneo/lollmsTiming Attack Vulnerability in parisneo/lollmsCVE-2025-63867.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 moreSSRF in parisneo/lollms-webuiCVE-2024-127667.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 moreDenial of Service (DoS) via Multipart Boundary in parisneo/lollms-webuiCVE-2024-87367.1 High
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal in parisneo/lollms-webuiCVE-2024-88986.7 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 moreInsufficient Patch Leading to DoS in parisneo/lollms-webuiCVE-2025-14517.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 moreCross-site Scripting (XSS) in parisneo/lollms-webuiCVE-2024-69865.5 Medium
- parisneo parisneo/lollmsRemote Code Execution in Calculate Function in parisneo/lollmsCVE-2024-6982Fix available8.4 High
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal and OS Command Injection in parisneo/lollms-webuiCVE-2024-100196.3 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 moreUnrestricted File Upload and Execution in parisneo/lollms-webuiCVE-2024-99206.6 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 moreMissing Authentication Check in parisneo/lollms-webuiCVE-2024-99198.4 High
- parisneo parisneo/lollms, lollms web ui +1 moreRelative Path Traversal in parisneo/lollms-webuiCVE-2024-70584.4 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 moreDirectory Listing Vulnerability in parisneo/lollms-webuiCVE-2024-100475.3 Medium
- parisneo parisneo/lollmsPath Traversal in parisneo/lollmsCVE-2024-95977.1 High
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal in parisneo/lollms-webuiCVE-2024-85819.1 Critical
- parisneo parisneo/lollmsMissing check_access in lollms_binding_infos in parisneo/lollmsCVE-2024-113028.0 High
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 moreXSS and Open Redirect via SVG File Upload in parisneo/lollms-webuiCVE-2024-51257.3 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCSRF Vulnerability in parisneo/lollms-webuiCVE-2024-66734.4 Medium
- parisneo lollms, parisneo/lollms, lollms lord of large language models +2 moreRemote Code Execution due to Stored XSS in parisneo/lollmsCVE-2024-6581Fix available6.5 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreData Leak through CORS Misconfiguration in parisneo/lollms-webuiCVE-2024-66748.1 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreDenial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webuiCVE-2024-69597.1 High
- lollms, parisneo parisneo/lollms +1 morePath Traversal in api open_personality_folder in parisneo/lollms-webuiCVE-2024-6985Fix available4.4 Medium
- lollms lollms-webui, parisneo lollms, parisneo/lollms +2 morePath Traversal in parisneo/lollms-webuiCVE-2024-69713.4 Low
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreLocal File Inclusion in parisneo/lollms-webuiCVE-2024-63947.5 High
- parisneo lollms-webui, parisneo/lollms, lollms web ui +2 moreMissing client_id in parisneo/lollms-webuiCVE-2024-60404.4 Medium
- parisneo lollms, parisneo/lollms +1 morePath Traversal in parisneo/lollmsCVE-2024-6281Fix available7.3 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreRemote Code Execution in parisneo/lollms-webuiCVE-2024-48978.4 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreCross-site Scripting (XSS) in parisneo/lollms-webuiCVE-2024-59336.1 Medium
- parisneo parisneo/lollms, lollms-webui +1 morePath Traversal in parisneo/lollmsCVE-2024-61397.3 High
- parisneo parisneo/lollms, lollms-webui +1 morePath Traversal in parisneo/lollmsCVE-2024-5824Fix available7.4 High
- parisneo lollms, parisneo/lollms +1 morePath Traversal in parisneo/lollmsCVE-2024-60858.6 High
- parisneo parisneo/lollms-webui, lollms web ui, parisneo parisneo\/lollms-webui +2 moreAbsolute Path Traversal in parisneo/lollms-webuiCVE-2024-62507.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal and RFI Vulnerability in parisneo/lollms-webuiCVE-2024-44987.7 High
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 moreCSRF in Servers Configurations in parisneo/lollms-webuiCVE-2024-48394.4 Medium
- lollms, parisneo parisneo/lollms, lollms-webui +2 moreCSRF Vulnerability in parisneo/lollms XTTS ServerCVE-2024-44997.6 High
- lollms, parisneo parisneo/lollms +1 moreRemote Code Execution in create_conda_env function in parisneo/lollmsCVE-2024-3121Public exploit6.8 Medium
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 morePath Traversal in parisneo/lollms-webuiCVE-2024-48414.0 Medium
- parisneo lollms, parisneo/lollms +1 moreRemote Code Execution via Path Traversal in parisneo/lollmsCVE-2024-5443Fix available9.8 Critical
- parisneo lollms, parisneo/lollms +1 moreLFI Vulnerability due to Lack of Path Sanitization in parisneo/lollmsCVE-2024-4315Fix available9.1 Critical
- Show olderLoading…