Description
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vulnerability arises from the improper handling of user-controlled path input, which is directly joined into a filesystem path without sanitization or containment checks. URL-encoded dot-dot sequences (`%2e%2e`) bypass Starlette's built-in path normalization and are resolved by Python's `pathlib`, allowing an unauthenticated attacker to read arbitrary files on the server. This issue has been resolved in version 3.
Published: 2026-08-09
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A path traversal flaw exists in the SPA catch‑all route of parisneo/lollms version 2.1.0. Untrusted path components are concatenated without sanitization, allowing an attacker to supply encoded dot‑dot sequences that bypass Starlette’s normalization and are interpreted by pathlib. This results in an unauthenticated read of any file on the server’s filesystem, exposing sensitive data with a CWE‑23 weakness.

Affected Systems

The vulnerability affects the lollms product from parisneo, specifically version 2.1.0. It has been fixed in the subsequent 3.x release and does not apply to newer versions.

Risk and Exploitability

The CVSS score of 7.5 reflects a high severity. No EPSS data or KEV listing is available, indicating no widespread exploitation campaigns are known. The flaw is exploitable remotely via the web application without authentication, so the potential impact is high, but it requires that the vulnerable route be reachable over the network.

Generated by OpenCVE AI on August 9, 2026 at 05:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade lollms to version 3.x or later.
  • Disable or remove the SPA catch‑all route at backend/routers/ui.py until a patch is available.
  • Configure the application to limit file system access or run the service within a sandbox with restricted permissions to mitigate potential exploitation.

Generated by OpenCVE AI on August 9, 2026 at 05:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 09 Aug 2026 05:45:00 +0000

Type Values Removed Values Added
First Time appeared Parisneo
Parisneo parisneo/lollms
Vendors & Products Parisneo
Parisneo parisneo/lollms

Sun, 09 Aug 2026 04:15:00 +0000

Type Values Removed Values Added
Description A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vulnerability arises from the improper handling of user-controlled path input, which is directly joined into a filesystem path without sanitization or containment checks. URL-encoded dot-dot sequences (`%2e%2e`) bypass Starlette's built-in path normalization and are resolved by Python's `pathlib`, allowing an unauthenticated attacker to read arbitrary files on the server. This issue has been resolved in version 3.
Title Path Traversal Vulnerability in parisneo/lollms
Weaknesses CWE-23
References
Metrics cvssV3_0

{'score': 7.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Parisneo Parisneo/lollms
cve-icon MITRE

Status: PUBLISHED

Assigner: @huntr_ai

Published:

Updated: 2026-08-09T03:52:26.218Z

Reserved: 2026-06-01T23:37:24.687Z

Link: CVE-2026-10595

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-09T05:30:16Z

Weaknesses
  • CWE-23

    Relative Path Traversal