PYSEC-2026-1589 path traversal vulnerability was identified in the parisneo/lollms-webui

A path traversal vulnerability was identified in the parisneo/lollms-webui repository, specifically within version 9.6. The vulnerability arises due to improper handling of user-supplied input in the 'listpersonalities' endpoint. By crafting a malicious HTTP request, an attacker can traverse the...

EUVD-2024-2008

Malicious code in bioql PyPI...

LoLLMs 路径遍历漏洞

LoLLMs is a Web UI for a large language multimodal system by Saifeddine ALOUI Personal Developer. A path traversal vulnerability exists in LoLLMs version 9.6, which stems from the listpersonalities endpoint mishandling user-supplied input, and can be exploited by an attacker to traverse the...

LoLLMs Security Vulnerabilities

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from mishandling of user-supplied input in the listpersonalities function, allowing an attacker to traverse the directory structure and list...

PT-2024-30383

Name of the Vulnerable Software and Affected Versions parisneo/lollms-webui version affected versions not specified Description A path traversal issue exists, specifically within the "/list personalities" endpoint, allowing an attacker to traverse the directory structure by manipulating the...