lollms

Records10

1. closed9.8
   LoLLMs CVE-2026-1114: LoLLMs Weak JWT Secret Key Access Control Flaw

   Patch now · Disclosed · since 7 Apr 2026 · CVE-2026-1114

   AI
2. closed7.5
   LoLLMs CVE-2025-6386: Lollms Timing Attack Vulnerability in User Authentication

   Patch now · Disclosed · since 7 Jul 2025 · CVE-2025-6386

   AI
3. closed8.4
   LoLLMs CVE-2024-6982: LoLLMS Code Injection and Sandbox Bypass

   Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-6982

   AI
4. closed4.4
   LoLLMs CVE-2024-6673: CSRF vulnerability in LoLLMS WebUI ComfyUI installation endpoint

   Patch now · Disclosed · since 29 Oct 2024 · CVE-2024-6673

   AI
5. closed7.1
   LoLLMs CVE-2024-6959: Lollms-webui denial of service vulnerability

   Patch now · Disclosed · since 13 Oct 2024 · CVE-2024-6959

   AI
6. closed4.4
   LoLLMs CVE-2024-6040: Missing client_id parameter leads to CSRF in lollms-webui

   Patch now · Disclosed · since 1 Aug 2024 · CVE-2024-6040

   AI
7. closed9.8
   LoLLMs CVE-2024-5443: Lollms path traversal remote code execution

   Patch now · Disclosed · since 22 Jun 2024 · CVE-2024-5443

   AI
8. closed9.1
   LoLLMs CVE-2024-4315: Lollms Local File Inclusion vulnerability

   Patch now · Disclosed · since 12 Jun 2024 · CVE-2024-4315

   AI
9. closed9.8
   LoLLMs CVE-2024-3429: Path Traversal Vulnerability in LoLLMS

   Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-3429

   AI
10. closed4.0
    LoLLMs CVE-2024-4330: Path traversal in parisneo/lollms-webui

    Patch now · Disclosed · since 2 Jun 2024 · CVE-2024-4330

    AI