3 matches found
The vulnerability of the _download_image_to_temp() function in the system, which is used for launching and managing large language models in LoLLMS (Lord of Large Language Multimodal Systems), allows a hacker to perform an SSRF attack.
The vulnerability of the downloadimagetotemp function in the system for launching and managing large language multimodal systems LoLLMS is related to insufficient testing of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack...
PYSEC-2026-2199
A Server-Side Request Forgery SSRF vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the /api/files/export-content endpoint. The downloadimagetotemp function in backend/routers/files.py fails to validate user-controlled URLs, allowing attackers to make arbitrary HTT...
