Directory Traversal

Overview lollms is a python library for AI personality definition Affected versions of this package are vulnerable to Directory Traversal over the wipedatabase endpoint. An attacker can delete any directory on the target filesystem by sending a specially crafted HTTP request that manipulates the...

PT-2025-12286

Name of the Vulnerable Software and Affected Versions parisneo/lollms version v12 Description A Path Traversal issue exists in the "/wipe database" endpoint, allowing an attacker to delete any directory on the system. This is due to improper validation of the key parameter, which is used to...

LoLLMs path traversal vulnerability

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A path traversal vulnerability exists in LoLLMs v12, which stems from path traversal in the /wipedatabase endpoint and could lead to arbitrary directory deletion...