Vulnerability-Lookup

CVE-2024-4078 (GCVE-0-2024-4078)

Vulnerability from cvelistv5 – Published: 2024-05-16 09:03 – Updated: 2024-08-08 14:40

Title

Arbitrary Code Execution in parisneo/lollms

Summary

A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed.

Severity

9.8 (Critical)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-16 14:55 UTC

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

@huntr_ai mitre root Scorecard

References

2 references

URL	Tags
https://huntr.com/bounties/a55a8c04-df44-49b2-bcf…
https://github.com/parisneo/lollms/commit/7ebe08d…

Impacted products

2 products

Vendor	Product	Version	CPE status
parisneo	parisneo/lollms	Affected: unspecified , < main (custom)	guessed
parisneo	lollms-webui	Affected: 1.4.6 cpe:2.3:a:parisneo:lollms-webui::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T20:33:51.663Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:parisneo:lollms-webui:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lollms-webui",
            "vendor": "parisneo",
            "versions": [
              {
                "status": "affected",
                "version": "1.4.6"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-4078",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-16T14:55:26.479896Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-08T14:40:25.921Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "parisneo/lollms",
          "vendor": "parisneo",
          "versions": [
            {
              "lessThan": "main",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77  Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-16T09:03:49.562Z",
        "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "shortName": "@huntr_ai"
      },
      "references": [
        {
          "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
        },
        {
          "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
        }
      ],
      "source": {
        "advisory": "a55a8c04-df44-49b2-bcfa-2a2b728a299d",
        "discovery": "EXTERNAL"
      },
      "title": "Arbitrary Code Execution in parisneo/lollms"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
    "assignerShortName": "@huntr_ai",
    "cveId": "CVE-2024-4078",
    "datePublished": "2024-05-16T09:03:49.562Z",
    "dateReserved": "2024-04-23T14:42:00.879Z",
    "dateUpdated": "2024-08-08T14:40:25.921Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-4078",
      "date": "2026-10-05",
      "epss": "0.00924",
      "percentile": "0.59052"
    },
    "fkie_nvd": {
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed."
        },
        {
          "lang": "es",
          "value": "Una vulnerabilidad en parisneo/lollms, espec\u00edficamente en el endpoint `/unInstall_binding`, permite la ejecuci\u00f3n de c\u00f3digo arbitrario debido a una sanitizaci\u00f3n insuficiente de la entrada del usuario. El problema surge de la falta de sanitizaci\u00f3n de rutas al manejar el par\u00e1metro `name` en la funci\u00f3n `unInstall_binding`, lo que permite a un atacante atravesar directorios y ejecutar c\u00f3digo arbitrario cargando un archivo `__init__.py` malicioso. Esta vulnerabilidad afecta a la \u00faltima versi\u00f3n del software. La explotaci\u00f3n de esta vulnerabilidad podr\u00eda conducir a la ejecuci\u00f3n remota de c\u00f3digo en el sistema donde est\u00e1 implementado parisneo/lollms."
        }
      ],
      "id": "CVE-2024-4078",
      "lastModified": "2024-11-21T09:42:09.057",
      "metrics": {
        "cvssMetricV30": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.0"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 5.9,
            "source": "security@huntr.dev",
            "type": "Secondary"
          }
        ]
      },
      "published": "2024-05-16T09:15:15.313",
      "references": [
        {
          "source": "security@huntr.dev",
          "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
        },
        {
          "source": "security@huntr.dev",
          "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
        }
      ],
      "sourceIdentifier": "security@huntr.dev",
      "vulnStatus": "Awaiting Analysis",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-77"
            }
          ],
          "source": "security@huntr.dev",
          "type": "Secondary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "parisneo/lollms",
                "vendor": "parisneo",
                "versions": [
                  {
                    "lessThan": "main",
                    "status": "affected",
                    "version": "unspecified",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "security@huntr.dev"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:parisneo:lollms-webui:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "lollms-webui",
                "vendor": "parisneo",
                "versions": [
                  {
                    "status": "affected",
                    "version": "1.4.6"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed."
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad en parisneo/lollms, espec\u00edficamente en el endpoint `/unInstall_binding`, permite la ejecuci\u00f3n de c\u00f3digo arbitrario debido a una sanitizaci\u00f3n insuficiente de la entrada del usuario. El problema surge de la falta de sanitizaci\u00f3n de rutas al manejar el par\u00e1metro `name` en la funci\u00f3n `unInstall_binding`, lo que permite a un atacante atravesar directorios y ejecutar c\u00f3digo arbitrario cargando un archivo `__init__.py` malicioso. Esta vulnerabilidad afecta a la \u00faltima versi\u00f3n del software. La explotaci\u00f3n de esta vulnerabilidad podr\u00eda conducir a la ejecuci\u00f3n remota de c\u00f3digo en el sistema donde est\u00e1 implementado parisneo/lollms."
          }
        ],
        "id": "CVE-2024-4078",
        "lastModified": "2026-06-17T08:01:03.917",
        "metrics": {
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "security@huntr.dev",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-4078",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-16T14:55:26.479896Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-05-16T09:15:15.313",
        "references": [
          {
            "source": "security@huntr.dev",
            "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
          },
          {
            "source": "security@huntr.dev",
            "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
          }
        ],
        "sourceIdentifier": "security@huntr.dev",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-77"
              }
            ],
            "source": "security@huntr.dev",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T22:07:46+00:00",
      "cve": "CVE-2024-4078",
      "id": "CVE-2024-4078",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Arbitrary Code Execution in parisneo/lollms",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-4078.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T20:33:51.663Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:parisneo:lollms-webui:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "lollms-webui",
                "vendor": "parisneo",
                "versions": [
                  {
                    "status": "affected",
                    "version": "1.4.6"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-4078",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-05-16T14:55:26.479896Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-05-16T15:04:38.854Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "parisneo/lollms",
              "vendor": "parisneo",
              "versions": [
                {
                  "lessThan": "main",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed."
            }
          ],
          "metrics": [
            {
              "cvssV3_0": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-77",
                  "description": "CWE-77  Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-05-16T09:03:49.562Z",
            "orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
            "shortName": "@huntr_ai"
          },
          "references": [
            {
              "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
            },
            {
              "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
            }
          ],
          "source": {
            "advisory": "a55a8c04-df44-49b2-bcfa-2a2b728a299d",
            "discovery": "EXTERNAL"
          },
          "title": "Arbitrary Code Execution in parisneo/lollms"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
        "assignerShortName": "@huntr_ai",
        "cveId": "CVE-2024-4078",
        "datePublished": "2024-05-16T09:03:49.562Z",
        "dateReserved": "2024-04-23T14:42:00.879Z",
        "dateUpdated": "2024-08-08T14:40:25.921Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

FKIE_CVE-2024-4078

Vulnerability from fkie_nvd - Published: 2024-05-16 09:15 - Updated: 2026-06-17 08:01

Severity

9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	security@huntr.dev	https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f
	security@huntr.dev	https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d
	af854a3a-2127-422b-91ae-364da2661108	https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f
	af854a3a-2127-422b-91ae-364da2661108	https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "parisneo/lollms",
          "vendor": "parisneo",
          "versions": [
            {
              "lessThan": "main",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "security@huntr.dev"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:parisneo:lollms-webui:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "lollms-webui",
          "vendor": "parisneo",
          "versions": [
            {
              "status": "affected",
              "version": "1.4.6"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en parisneo/lollms, espec\u00edficamente en el endpoint `/unInstall_binding`, permite la ejecuci\u00f3n de c\u00f3digo arbitrario debido a una sanitizaci\u00f3n insuficiente de la entrada del usuario. El problema surge de la falta de sanitizaci\u00f3n de rutas al manejar el par\u00e1metro `name` en la funci\u00f3n `unInstall_binding`, lo que permite a un atacante atravesar directorios y ejecutar c\u00f3digo arbitrario cargando un archivo `__init__.py` malicioso. Esta vulnerabilidad afecta a la \u00faltima versi\u00f3n del software. La explotaci\u00f3n de esta vulnerabilidad podr\u00eda conducir a la ejecuci\u00f3n remota de c\u00f3digo en el sistema donde est\u00e1 implementado parisneo/lollms."
    }
  ],
  "id": "CVE-2024-4078",
  "lastModified": "2026-06-17T08:01:03.917",
  "metrics": {
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "security@huntr.dev",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-4078",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-05-16T14:55:26.479896Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-05-16T09:15:15.313",
  "references": [
    {
      "source": "security@huntr.dev",
      "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
    },
    {
      "source": "security@huntr.dev",
      "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
    }
  ],
  "sourceIdentifier": "security@huntr.dev",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ],
      "source": "security@huntr.dev",
      "type": "Secondary"
    }
  ]
}

GHSA-PWC9-Q4HJ-PG8G

Vulnerability from github – Published: 2024-05-16 09:33 – Updated: 2024-09-13 19:34

Summary

LoLLMS Command Injection vulnerability

Details

A vulnerability in the parisneo/lollms, specifically in the /unInstall_binding endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the name parameter in the unInstall_binding function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious __init__.py file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed.

Severity

9.8 (Critical)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.9 (High)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "lollms"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.5.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2024-4078"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-77"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-09-13T19:34:51Z",
    "nvd_published_at": "2024-05-16T09:15:15Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed.",
  "id": "GHSA-pwc9-q4hj-pg8g",
  "modified": "2024-09-13T19:34:51Z",
  "published": "2024-05-16T09:33:08Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4078"
    },
    {
      "type": "WEB",
      "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/parisneo/lollms"
    },
    {
      "type": "WEB",
      "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
      "type": "CVSS_V4"
    }
  ],
  "summary": "LoLLMS Command Injection vulnerability"
}

GSD-2024-4078

Vulnerability from gsd - Updated: 2024-04-24 05:02

Details

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Aliases

CVE-2024-4078

JSON

To clipboard

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-4078"
      ],
      "id": "GSD-2024-4078",
      "modified": "2024-04-24T05:02:07.885076Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-4078",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

PYSEC-2026-1593

Vulnerability from pysec - Published: 2026-07-07 11:45 - Updated: 2026-07-07 17:24

Details

Severity

9.8 (Critical)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.9 (High)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Impacted products

Name	purl
lollms	pkg:pypi/lollms

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "lollms",
        "purl": "pkg:pypi/lollms"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.5.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.1.10",
        "1.1.11",
        "1.1.12",
        "1.1.13",
        "1.1.14",
        "1.1.15",
        "1.1.16",
        "1.1.17",
        "1.1.18",
        "1.1.19",
        "1.1.20",
        "1.1.21",
        "1.1.22",
        "1.1.25",
        "1.1.26",
        "1.1.27",
        "1.1.28",
        "1.1.29",
        "1.1.3",
        "1.1.30",
        "1.1.31",
        "1.1.32",
        "1.1.33",
        "1.1.34",
        "1.1.35",
        "1.1.36",
        "1.1.37",
        "1.1.38",
        "1.1.45",
        "1.1.46",
        "1.1.47",
        "1.1.48",
        "1.1.49",
        "1.1.5",
        "1.1.50",
        "1.1.51",
        "1.1.52",
        "1.1.53",
        "1.1.55",
        "1.1.56",
        "1.1.57",
        "1.1.58",
        "1.1.59",
        "1.1.6",
        "1.1.60",
        "1.1.61",
        "1.1.62",
        "1.1.63",
        "1.1.64",
        "1.1.65",
        "1.1.66",
        "1.1.67",
        "1.1.68",
        "1.1.69",
        "1.1.7",
        "1.1.70",
        "1.1.71",
        "1.1.73",
        "1.1.74",
        "1.1.75",
        "1.1.76",
        "1.1.77",
        "1.1.78",
        "1.1.79",
        "1.1.80",
        "1.1.82",
        "1.1.83",
        "1.1.84",
        "1.1.85",
        "1.1.86",
        "1.1.9",
        "1.1.90",
        "1.1.91",
        "1.1.92",
        "1.2.0",
        "1.2.1",
        "1.2.10",
        "1.2.11",
        "1.2.12",
        "1.2.14",
        "1.2.3",
        "1.2.4",
        "1.2.6",
        "1.2.7",
        "1.2.8",
        "1.2.9",
        "2.0.0",
        "2.0.1",
        "2.0.10",
        "2.0.11",
        "2.0.12",
        "2.0.13",
        "2.0.14",
        "2.0.15",
        "2.0.16",
        "2.0.17",
        "2.0.18",
        "2.0.19",
        "2.0.2",
        "2.0.20",
        "2.0.21",
        "2.0.22",
        "2.0.23",
        "2.0.24",
        "2.0.25",
        "2.0.26",
        "2.0.27",
        "2.0.28",
        "2.0.3",
        "2.0.30",
        "2.0.31",
        "2.0.32",
        "2.0.4",
        "2.0.5",
        "2.0.6",
        "2.0.8",
        "2.0.9",
        "2.1.0",
        "2.1.1",
        "2.1.10",
        "2.1.11",
        "2.1.12",
        "2.1.13",
        "2.1.14",
        "2.1.15",
        "2.1.16",
        "2.1.17",
        "2.1.18",
        "2.1.19",
        "2.1.2",
        "2.1.20",
        "2.1.21",
        "2.1.22",
        "2.1.23",
        "2.1.24",
        "2.1.25",
        "2.1.26",
        "2.1.27",
        "2.1.28",
        "2.1.29",
        "2.1.3",
        "2.1.30",
        "2.1.31",
        "2.1.32",
        "2.1.34",
        "2.1.35",
        "2.1.36",
        "2.1.37",
        "2.1.38",
        "2.1.39",
        "2.1.4",
        "2.1.40",
        "2.1.42",
        "2.1.43",
        "2.1.44",
        "2.1.45",
        "2.1.46",
        "2.1.47",
        "2.1.48",
        "2.1.49",
        "2.1.5",
        "2.1.50",
        "2.1.51",
        "2.1.53",
        "2.1.54",
        "2.1.55",
        "2.1.56",
        "2.1.59",
        "2.1.6",
        "2.1.60",
        "2.1.7",
        "2.1.8",
        "2.1.9",
        "2.2.0",
        "2.2.1",
        "2.2.2",
        "2.2.3",
        "2.2.4",
        "2.2.5",
        "2.2.6",
        "2.2.7",
        "2.2.8",
        "2.3.0",
        "2.3.1",
        "2.3.3",
        "2.3.4",
        "3.0.0",
        "3.1.0",
        "3.1.5",
        "3.2.0",
        "4.0.0",
        "4.0.1",
        "4.0.2",
        "4.1.0",
        "4.1.5",
        "4.1.6",
        "4.2.0",
        "4.2.1",
        "4.2.2",
        "4.5.0",
        "4.5.1",
        "4.5.2",
        "4.5.3",
        "5.0.0",
        "5.0.1",
        "5.0.2",
        "5.1.0",
        "5.1.1",
        "5.2.0",
        "5.2.1",
        "5.3.0",
        "5.3.1",
        "5.5.0",
        "5.5.1",
        "5.5.2",
        "5.5.3",
        "5.5.4",
        "5.5.5",
        "5.5.6",
        "5.6.0",
        "5.6.2",
        "5.7.0",
        "5.7.1",
        "5.7.2",
        "5.7.3",
        "5.7.5",
        "5.7.6",
        "5.7.7",
        "5.7.8",
        "5.7.9",
        "5.8.1",
        "5.8.2",
        "5.8.3",
        "5.8.5",
        "5.8.6",
        "5.8.7",
        "5.8.8",
        "5.9.0",
        "5.9.1",
        "5.9.2",
        "5.9.3",
        "5.9.4",
        "5.9.5",
        "6.0.0",
        "6.0.1",
        "6.0.2",
        "6.0.3",
        "6.0.5",
        "6.0.6",
        "6.0.7",
        "6.0.8",
        "6.0.9",
        "6.1.1",
        "6.2.0",
        "6.4.0",
        "6.5.0",
        "6.5.1",
        "6.5.2",
        "6.6.0",
        "6.7.0",
        "6.9.0",
        "7.2.0",
        "9.3.0"
      ]
    }
  ],
  "aliases": [
    "CVE-2024-4078",
    "GHSA-pwc9-q4hj-pg8g"
  ],
  "details": "A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed.",
  "id": "PYSEC-2026-1593",
  "modified": "2026-07-07T17:24:36.288840Z",
  "published": "2026-07-07T11:45:42.446064Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4078"
    },
    {
      "type": "WEB",
      "url": "https://github.com/parisneo/lollms/commit/7ebe08da7e0026b155af4f7be1d6417bc64cf02f"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/parisneo/lollms"
    },
    {
      "type": "WEB",
      "url": "https://huntr.com/bounties/a55a8c04-df44-49b2-bcfa-2a2b728a299d"
    },
    {
      "type": "PACKAGE",
      "url": "https://pypi.org/project/lollms"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-pwc9-q4hj-pg8g"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
      "type": "CVSS_V4"
    }
  ],
  "summary": "LoLLMS Command Injection vulnerability"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-4078 (GCVE-0-2024-4078)

FKIE_CVE-2024-4078

GHSA-PWC9-Q4HJ-PG8G

GSD-2024-4078

PYSEC-2026-1593

Tags

Sightings

Nomenclature

Related by attack behaviour