Skip to content
OpenAdvisories

Vendor

parisneo

84 known vulnerabilities.

Products

parisneo/lollms-webui 53 parisneo/lollms 30 lollms-webui 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-33340 Public exploit Scanner template EPSS 22%

    LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint

    LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems. A critical Server-Side Request Forgery (SSRF) vulnerability has been identified in all known existing versions of `lollms-webui`. The `@router.post("/api/proxy")`…

    parisneo lollms-webui
  • Critical 9.8
    CVE-2024-4320 Public exploit EPSS 34%

    Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui

    A remote code execution (RCE) vulnerability exists in the '/install_extension' endpoint of the parisneo/lollms-webui application, specifically within the `@router.post("/install_extension")` route handler. The vulnerability arises due to improper handling of …

    parisneo parisneo/lollms-webui