CVE-2026-10595
Received Received - Intake

Path Traversal in Lollms AI Application

Publication date: 2026-08-09

Last updated on: 2026-08-09

Assigner: huntr.dev

Description
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vulnerability arises from the improper handling of user-controlled path input, which is directly joined into a filesystem path without sanitization or containment checks. URL-encoded dot-dot sequences (`%2e%2e`) bypass Starlette's built-in path normalization and are resolved by Python's `pathlib`, allowing an unauthenticated attacker to read arbitrary files on the server. This issue has been resolved in version 3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-09
Last Modified
2026-08-09
Generated
2026-08-09
AI Q&A
2026-08-09
EPSS Evaluated
N/A
NVD
CVE-2026-10595
EUVD
EUVD-2026-54864

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
parisneo lollms to 3.0.0 (exc)
parisneo lollms 3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-23 The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a path traversal vulnerability in parisneo/lollms version 2.1.0. It allows unauthenticated attackers to read arbitrary files on the server by exploiting improper handling of user-controlled path input in the SPA catch-all route of backend/routers/ui.py. URL-encoded sequences bypass path normalization and are resolved by Python's pathlib.

Detection Guidance

Check if parisneo/lollms version 2.1.0 is installed by running: pip show lollms. If installed, inspect the file backend/routers/ui.py for the SPA catch-all route handling user-controlled path input without sanitization.

Impact Analysis

An attacker could exploit this to access sensitive files on the server, including configuration files, user data, or system files. This could lead to data breaches, unauthorized access to confidential information, or further attacks on the system.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by exposing personal or sensitive data. GDPR requires protection of personal data, while HIPAA mandates safeguards for protected health information. A breach could result in legal penalties and reputational damage.

Mitigation Strategies

Upgrade to version 3 or later of parisneo/lollms immediately. If upgrading is not possible, apply the patch from commit 9bc6431 by modifying the serve_vue_app function in backend/routers/ui.py to validate resolved paths against the static directory.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-10595. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart