Path Traversal

Lollms is vulnerable to a path traversal vulnerability. The vulnerability is due to improper validation of file paths in the lollmsfilesystem.py file, where functions like addragdatabase, togglemountragdatabase, and vectorizefolder lack necessary security measures, allowing attackers to access an...

PT-2024-37375

Name of the Vulnerable Software and Affected Versions: lollms package version v9.6 Description: A path traversal issue exists due to the ability to perform an unauthenticated root folder settings change. Although the read file endpoint is protected against path traversals, this protection can be...