LoLLMS Path Traversal vulnerability
Modified: 9/25/2024
package
pkg:pypi/lollms
LoLLMS Path Traversal vulnerability
Modified: 9/25/2024
Lord of Large Language Models (LoLLMs) path traversal vulnerability in the api open_personality_folder endpoint
Modified: 11/15/2024
Remote Code Execution in create_conda_env function in lollms
Modified: 9/13/2024
Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py
Modified: 10/14/2024
Lollms has an Improper Access Control vulnerability
Modified: 2/3/2026
parisneo/lollms has an insufficient session expiration vulnerability
Modified: 4/8/2026
LoLLMS vulnerable to Expected Behavior Violation
Modified: 10/15/2025
parisneo/lollms vulnerable to stored XSS in the social feature
Modified: 4/10/2026
lollms vulnerable to path traversal due to unauthenticated root folder settings change
Modified: 6/28/2024
path traversal vulnerability was identified in the parisneo/lollms-webui
Modified: 7/9/2025
Lollms vulnerable to Cross-site Scripting
Modified: 11/4/2024
Lord of Large Language Models vulnerable to Observable Discrepancy attack via authenticate_user function
Modified: 7/8/2025
LoLLMS Code Injection vulnerability
Modified: 3/21/2025
lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE
Modified: 6/28/2024
Remote Code Execution via path traversal bypass in lollms
Modified: 6/25/2024
LoLLMS Path Traversal vulnerability
Modified: 10/17/2024
LoLLMS Command Injection vulnerability
Modified: 9/13/2024
parisneo/lollms Local File Inclusion (LFI) attack
Modified: 6/12/2024
lollms vulnerable to dot-dot-slash path traversal in XTTS server
Modified: 6/28/2024
Modified: 10/17/2024
Modified: 10/9/2025
Modified: 11/15/2024
Modified: 5/31/2026
Modified: 6/6/2026