Login Request a demo
LO
Product
lollms-webui
by ParisNeo · last CVE Mar 24, 2026
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities42In the news0Timeline
Severity mix
Critical 18High 17Medium 4Low 3
Severity
All severities42Critical18High17Medium4Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lollms-webui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-2359
9.8
1%
Jun 6
Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui
Affected: 0
CVE-2024-2360
9.8
2%
Jun 6
Path Traversal leading to Remote Code Execution in parisneo/lollms-webui
Affected: 0
CVE-2024-3429
9.8
28%
Jun 6
Path Traversal in parisneo/lollms
Affected: before 9.6
CVE-2024-3322
9.8
1%
Jun 6
Path Traversal in parisneo/lollms-webui
Affected: before 9.5
CVE-2024-2624
9.8
1%
Jun 6
Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui
Affected: before 9.4
CVE-2024-5482
9.8
1%
Jun 6
SSRF in add_webpage endpoint in parisneo/lollms-webui
Affected: 0
CVE-2024-4267
9.8
1%
May 22
Remote Code Execution in parisneo/lollms-webui
Affected: 9.5
CVE-2024-4078
9.8
1%
May 16
Arbitrary Code Execution in parisneo/lollms
Affected: 1.4.6
CVE-2024-4326
9.8
1%
May 16
Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webui
Affected: before 9.5
CVE-2024-2358
9.8
1%
May 16
Path Traversal leading to Remote Code Execution in parisneo/lollms-webui
Affected: All versions, or not specified
CVE-2024-1601
9.8
40%
Apr 16
SQL Injection in parisneo/lollms-webui
Affected: 9.0 before 9.2
CVE-2024-1520
9.8
48%
Apr 10
OS Command Injection in parisneo/lollms-webui
Affected: 9.0
CVE-2024-1511
9.8
1%
Apr 10
Path Traversal Vulnerability in parisneo/lollms-webui
Affected: 9.0 before 9.5
CVE-2024-2361
9.6
1%
May 16
Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui
Affected: All versions, or not specified
CVE-2024-1600
9.3
33%
Apr 10
Local File Inclusion in parisneo/lollms-webui
Affected: before 9.5
CVE-2026-33340
9.1
22%
Mar 24
LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint
Affected: <= 8c5dcef63d847bb3d027ec74915d8fe4afd3014e
CVE-2024-2362
9.1
1%
Jun 6
Path Traversal in parisneo/lollms-webui
Affected: 9.3
CVE-2024-2366
9.0
1%
May 16
Remote Code Execution in parisneo/lollms-webui
Affected: All versions, or not specified
CVE-2024-6040
8.8
0%
Aug 1
Missing client_id in parisneo/lollms-webui
Affected: 9.8
CVE-2024-4403
8.8
0%
Jun 10
CSRF in restart_program in parisneo/lollms-webui
Affected: 0
CVE-2024-1522
8.8
0%
Mar 30
Cross-Site Request Forgery (CSRF) Leading to Remote Code Execution in parisneo/lollms-webui
Affected: before 9,.2
CVE-2024-4897
8.4
0%
Jul 2
Remote Code Execution in parisneo/lollms-webui
Affected: 9.5
CVE-2024-3435
8.4
1%
May 16
Path Traversal in parisneo/lollms-webui
Affected: before 9.5
CVE-2024-2288
8.3
0%
Jun 6
CSRF File Upload Vulnerability in parisneo/lollms-webui
Affected: before 7.3.0
CVE-2024-1646
8.2
1%
Apr 16
Authentication Bypass in parisneo/lollms-webui
Affected: All versions, or not specified
CVE-2024-4328
8.1
0%
Jun 10
CSRF in clear_personality_files_list in parisneo/lollms-webui
Affected: 9.6
CVE-2024-4498
7.7
0%
Jun 25
Path Traversal and RFI Vulnerability in parisneo/lollms-webui
Affected: 9.7
CVE-2024-6394
7.5
1%
Sep 30
Local File Inclusion in parisneo/lollms-webui
Affected: before 9.8
CVE-2024-2178
7.5
1%
Jun 2
Path Traversal Vulnerability in parisneo/lollms-webui
Affected: 0
CVE-2024-1569
7.5
1%
Apr 16
Uncontrolled Resource Consumption in parisneo/lollms-webui
Affected: before 9.6
CVE-2024-5824
7.4
0%
Jun 27
Path Traversal in parisneo/lollms
Affected: 0
CVE-2024-5125
7.3
0%
Nov 14
XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
Affected: before 9.8
CVE-2024-6139
7.3
1%
Jun 27
Path Traversal in parisneo/lollms
Affected: 9.6 through 9.8
CVE-2024-6674
7.1
0%
Oct 29
Data Leak through CORS Misconfiguration in parisneo/lollms-webui
Affected: before 10
CVE-2024-6959
7.1
0%
Oct 13
Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui
Affected: 9.8
CVE-2024-6673
6.5
0%
Oct 29
CSRF Vulnerability in parisneo/lollms-webui
Affected: before 9.9
CVE-2024-4499
6.3
0%
Jun 24
CSRF Vulnerability in parisneo/lollms XTTS Server
Affected: 0
CVE-2024-1602
6.1
1%
Apr 10
Stored XSS leading to RCE in parisneo/lollms-webui
Affected: 9.0 before 9.6
CVE-2024-5933
5.4
0%
Jun 27
Cross-site Scripting (XSS) in parisneo/lollms-webui
Affected: 0
CVE-2024-4839
3.3
0%
Jun 24
CSRF in Servers Configurations in parisneo/lollms-webui
Affected: 9.6
CVE-2024-4841
3.3
1%
Jun 23
Path Traversal in parisneo/lollms-webui
Affected: 9.6
CVE-2024-4330
3.3
0%
May 30
Path Traversal in parisneo/lollms-webui
Affected: through 9.6
Showing 42