parisneo/lollms-webui vulnerabilities | LiveThreat CVE Feed

Product

parisneo/lollms-webui

by parisneo · last CVE Feb 2, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities53 In the news0 Timeline

Severity mix

Critical 20High 22Medium 8Low 3

Severity

All severities53 Critical20 High22 Medium8 Low3

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add parisneo/lollms-webui to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-9920	8.8	1%	Mar 20	Unrestricted File Upload and Execution in parisneo/lollms-webui Affected: through latest
CVE-2024-4403	8.8	0%	Jun 10	CSRF in restart_program in parisneo/lollms-webui Affected: through latest
CVE-2024-1522	8.8	0%	Mar 30	Cross-Site Request Forgery (CSRF) Leading to Remote Code Execution in parisneo/lollms-webui Affected: before 9.2
CVE-2024-9919	8.4	0%	Mar 20	Missing Authentication Check in parisneo/lollms-webui Affected: through latest
CVE-2024-4897	8.4	0%	Jul 2	Remote Code Execution in parisneo/lollms-webui Affected: through latest
CVE-2024-3435	8.4	1%	May 16	Path Traversal in parisneo/lollms-webui Affected: before 9.5
CVE-2024-3126	8.4	1%	May 16	Command Injection in parisneo/lollms-webui Affected: before 9.5
CVE-2024-2288	8.3	0%	Jun 6	CSRF File Upload Vulnerability in parisneo/lollms-webui Affected: before 9.3
CVE-2024-1646	8.2	1%	Apr 16	Authentication Bypass in parisneo/lollms-webui Affected: before 9.3
CVE-2024-4328	8.1	0%	Jun 10	CSRF in clear_personality_files_list in parisneo/lollms-webui Affected: through latest
CVE-2024-4498	7.7	0%	Jun 25	Path Traversal and RFI Vulnerability in parisneo/lollms-webui Affected: through latest
CVE-2024-12766	7.5	1%	Mar 20	SSRF in parisneo/lollms-webui Affected: through latest
CVE-2025-1451	7.5	1%	Mar 20	Insufficient Patch Leading to DoS in parisneo/lollms-webui Affected: through latest
CVE-2024-6394	7.5	1%	Sep 30	Local File Inclusion in parisneo/lollms-webui Affected: through latest
CVE-2024-6250	7.5	2%	Jun 27	Absolute Path Traversal in parisneo/lollms-webui Affected: through latest
CVE-2024-2548	7.5	1%	Jun 6	Path Traversal in parisneo/lollms-webui Affected: before 9.5
CVE-2024-2178	7.5	1%	Jun 2	Path Traversal Vulnerability in parisneo/lollms-webui Affected: through latest
CVE-2024-4322	7.5	31%	May 16	Path Traversal in parisneo/lollms-webui Affected: through latest
CVE-2024-1569	7.5	1%	Apr 16	Uncontrolled Resource Consumption in parisneo/lollms-webui Affected: before 9.2
CVE-2024-5125	7.3	0%	Nov 14	XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui Affected: before 9.8
CVE-2024-6674	7.1	0%	Oct 29	Data Leak through CORS Misconfiguration in parisneo/lollms-webui Affected: before 10
CVE-2024-6959	7.1	0%	Oct 13	Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui Affected: through latest