repository icon
parisneo / lollms Project repository

Lord of LLMS

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN36 DAYS

FIX

WITHIN80 DAYS

ZipSlip Path Traversal to Remote Code Execution via /upload_app
vudinhhung513
not applicable
Insecure Direct Object Reference (IDOR) Allows Arbitrary Users to Access Private...
cyb3r-krypt0n
pending
Remote Code Execution (RCE) via Unsandboxed exec() in Flow Studio /api/flows/tes...
cyb3r-krypt0n
pending
Prompt sharing stores unsanitized DM content leading to stored XSS in the recipi...
khanhdlq
pending
Any authenticated user can download private DM attachments if they know the atta...
khanhdlq
pending
Any authenticated user can send messages into private DM group conversations
khanhdlq
pending
Vulnerability Report: Regular User Can Promote Personal App to `system` and Inje...
alipayhihonor
pending
Broken Access Control in Group DM: Non-member can inject messages into arbitrary...
alipayhihonor
pending
Path Traversal Vulnerability in SPA Catch-All Route of backend/routers/ui.py
alipayhihonor
pending
SSRF via unvalidated pdf_url in arxiv notebook ingestion allows cloud metadata t...
jd-admrl-ai
self closed
SSRF via Unvalidated URL in Datastore Scrape and Notebook Scrape Endpoints
jd-admrl-ai
self closed
Arbitrary File Read via LaTeX `\input` in /api/discussions/{id}/compile-latex
sahiloj
pending
RCE via /api/flows/test_code
hainguyen0207
duplicate
Critical
RCE via Flow Studio exec()
hainguyen0207
duplicate
Critical
SSRF via URL Authority Bypass in GitHub Import — Unique Vulnerability (Not a Dup...
crazymarky
High
•CVE-2026-17080
RCE in LoLLMs Flow Engine via Un-sandboxed Node Execution
arjunshibu
duplicate
Critical
Password Reset Link Poisoning via Host Header Leading to Account Takeover
h3ri0s
pending
Arbitrary File Read via LaTeX Injection in compile_latex_code (potential RCE wit...
wulonchia-pro
High
•CVE-2026-16501
Unauthenticated SPA Catch-All Path Traversal Enables Arbitrary File Read
zeroc0077
pending
Stored XSS in Prompt-Sharing Direct Messages leading to account takeover
h3ri0s
High
•CVE-2026-12228
User-controlled LaTeX compilation allows arbitrary local file read
zeroc0077
pending
Unauthenticated Arbitrary File Read via Path Traversal in SPA Catch-All Route
qaxwdx
pending
SSRF via /api/store/scrape-url — authenticated users can reach internal services...
head-blini
pending
Security Advisory: Authorization Bypass in Group DM — Non-Member Can Inject Mess...
crazymarky
pending
SSRF via Unvalidated URL in Artefact Import and Datastore Scrape (Incomplete CVE...
willardjansen
Medium
•CVE-2026-17430
[SSRF] Unauthenticated Full-Read SSRF via Open Proxy in /api/proxy — Cloud Crede...
anlor1002-alt
pending
GitHub Search API Parameter Injection via Unsanitized Query in search_github End...
offset
pending
Missing Group Conversation Membership Check in DM Send Endpoint Allows Message I...
offset
pending
DM Attachment IDOR — Any Authenticated User Can Access Other Users' Private DM F...
offset
duplicate
None
StackExchange API Parameter Injection via Unsanitized Search Query in lollms
offset
pending
ReDoS in xlsx export endpoint via malicious markdown table content
orewapxl
pending
LaTeX Code Injection in compile-latex Endpoint Enables Arbitrary File Read → SEC...
moaaz-0x
duplicate
High
lollms Zoo README Path Traversal (Authenticated)
moth404
pending
RCE on endpoint "/api/flow/test_code" caused by unsanitized POST request paramet...
j0azz
duplicate
High
Arbitrary File Read via LaTeX Injection in compile-latex endpoint
duonghaonika
pending
Server-Side Request Forgery (SSRF) in import_url endpoint via ScrapeMaster libra...
duonghaonika
duplicate
High
IDOR Allows Moderator to Delete Admin Comments from Home Feed
abuyazeen
pending
HTML Injection in Messaging Feature
abuyazeen
pending
XML External Entity (XXE) Injection via DOCX File Processing in LollMS
kimkou2024
pending
Unauthenticated User Management — Account Takeover in LollMS
kimkou2024
pending
Unauthenticated Admin Settings Access in LollMS
kimkou2024
pending
SSRF in Notebook Arxiv Ingestion via Unvalidated pdf_url - Additional Bypass of...
lihfdgjr
pending
SSRF via Incomplete CVE-2026-0560 Fix - Three Scrape/Import Endpoints Missing UR...
lihfdgjr
duplicate
Medium
Path Traversal in /upload_app leads to RCE via custom function injection
radikhoroshev
pending
Remote Code Execution via Unsandboxed exec() in Flow Studio
hacnho
duplicate
High
SSRF via GitHub Artefact URL Substring Check Bypass in parisneo/lollms
hacnho
duplicate
High
SSRF via GitHub Import — weak URL validation allows internal network access
pulkit7070
duplicate
High
Unsandboxed code execution via exec() + arbitrary pip install in flow studio end...
nhomyk
duplicate
Critical
SSO token accepted as main authentication token due to missing audience verifica...
sythenv
pending
JWT Token Lifetime Bug - Default Expiration Set to ~5000 Years Instead of 30 Day...
mom3gool2030
pending
Hardcoded Default SafeStore Encryption Key Enables Data Decryption
mom3gool2030
pending
Zip Slip Vulnerability in Datastore Import Allows Arbitrary File Write
mom3gool2030
pending
SSRF in Datastore URL Scraping Endpoint Allows Access to Internal Services
mom3gool2030
pending
IDOR in DM File Attachment Download Allows Any Authenticated User to Access Othe...
mom3gool2030
pending
SSRF in URL Import and Scrape Endpoints — Missing URL Validation Allows Access t...
ttcd77
duplicate
High
Remote Code Execution via exec() in Flow Studio with Default Admin Credentials
apeiria-zero
duplicate
Critical
Unsafe deserialization via pickle in LoLLMs model and personality loading
etwithin
pending
Arbitrary file write via unsanitized filename in notebook upload endpoint
d3banjan
pending
Remote Code Execution via Unsanitized `exec()` of User-Supplied Code in `/api/fl...
firebasky
duplicate
High
Unauthenticated SSRF via /api/proxy Endpoint Allows Access to Internal Network a...
galanzi2580-wq
pending
Remote Code Execution via Flow Studio Node Definitions
optimus-fulcria
Critical
•CVE-2026-10266
SSRF in URL Scraping Endpoints Allows Access to Internal Services
loris4py
duplicate
High
Unauthenticated LFI / Absolute Path Traversal via Windows Drive Letter Bypass
orel-asper
duplicate
High
Remote Code Execution via Socket.io Event Injection
sebas5207418
pending
XSS in Chat Message Leads to Account Tackover
justmahmoud1
High
•CVE-2026-1116
Stored XSS in Home Feed via Post Content Lead to Account Takeover
justmahmoud1
Critical
•CVE-2026-1115
Session is not expiring after password resetting
justmahmoud1
Medium
•CVE-2026-1163
Improper Access Control via Weak JWT Token Leads to Admin Takeover and Privilege...
justmahmoud1
Critical
•CVE-2026-1114
Unauthenticated File Upload in LollMS
aydinnyunus
High
•CVE-2026-0558
Server-Side Request Forgery (SSRF) in LollMS Export Content
aydinnyunus
High
•CVE-2026-0560
Insecure Direct Object Reference (IDOR) in LollMS Friend Request Response
aydinnyunus
High
•CVE-2026-0562
Content-Type Spoofing in LollMS Image Upload
aydinnyunus
Medium
•CVE-2026-5728
Improper Access Control in Socket.IO Event Handlers Allows Unauthenticated Execu...
0xmanan
High
•CVE-2026-1117
Timing attacks to guess password in lollms_authentication.py
achute
High
•CVE-2025-6386
SSRF Vulnerability in LoLLMs Internet Search Function
rootup
not applicable
Missing check_access in lollms_binding_infos
hainguyen0207
High
•$450•CVE-2024-11302
CSRF upload_voice
hainguyen0207
pending
Delete any folder in the system
hainguyen0207
High
•$450•CVE-2024-9597
By pass CVE-2024-7058 - sanitize_path()
hainguyen0207
duplicate
Medium
Read any subfolder in personalities zoo
hainguyen0207
duplicate
Medium
By pass CVE-2024-6985 - sanitize_path()
hainguyen0207
Medium
•$75•CVE-2024-7058
Remote Code Execution in the Calculate Function in lollms
shakreiner
High
•$450•CVE-2024-6982
SSRF and CSRF Vulnerabilities in Lollms Server 5.9.0
web-hacker-team
informative
High
Read any directory in personalities_zoo
hainguyen0207
informative
Medium
CSRF install_asr
hainguyen0207
duplicate
Medium
CSRF install_motion_ctrl
hainguyen0207
duplicate
Medium
CSRF install_petals
hainguyen0207
duplicate
Medium
CSRF install_ollama
hainguyen0207
duplicate
Medium
CSRF install_vllm
hainguyen0207
informative
Medium
Path Traversal in api open_personality_folder
hainguyen0207
Medium
•$75•CVE-2024-6985
Security issue - Path Traversal in file lollms_file_system.py
hainguyen0207
Low
•$15•CVE-2024-6971
Remote code exection due to stored XSS In svg image
virusday
Medium
•$75•CVE-2024-6581
lollms_binding_infos is missing client_id. Generates many security problems
hainguyen0207
Medium
•$75•CVE-2024-6040
Path Traversal in Settings
hainguyen0207
High
•$450•CVE-2024-6281
CSRF due to lax CORS policy in XTTS server
ehtec
High
•$450•CVE-2024-4499
Path traversal due to unauthenticated root folder settings change
ehtec
High
•$450•CVE-2024-6085
Dot-dot-slash path traversal in XTTS server
ehtec
High
•$450•CVE-2024-6139
Remote Code Execution via path traversal bypass CVE-2024-4320
nhienit2010
Critical
•$900•CVE-2024-5443
Remote Code Execution via sanitize_path() bypass using backslash in Windows
zpbrent
duplicate
Critical
Path traversal allow override config.yaml file leads to RCE
nhienit2010
High
•$540•CVE-2024-5824
Command Injection via sanitize_shell_code() bypass
zpbrent
duplicate
Critical
OS command injection in lollms.utilities at run_script_in_env function
thevietronin
duplicate
Critical
OS command injection in lollms.utilities at run_python_script_in_env function
thevietronin
duplicate
Critical
OS command injection in lollms.utilities
thevietronin
informative
Critical
lack of path sanitization for windows leads to LFI
0xanis
Critical
•$1080•CVE-2024-4315
Command Injection due to the overlook of applying sanitize_code()
zpbrent
informative
Critical
Path traversal leads to read any file on the Windows platform system
nhienit2010
High
•$450•CVE-2024-4881
Arbitrary file reading via path traversal
chanzep
Critical
•$1080•CVE-2024-3429
Remote Code Execution in create_conda_env function
dark-ninja10
Medium
•$75•CVE-2024-3121
Remote Code Execution caused by lack of sanitization in /unInstall_binding
retr0reg
Critical
•$900•CVE-2024-4078