https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:49:35.854134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-3435 CVE-2024-3435 — Path Traversal in parisneo/lollms-webui 2026-10-05T21:49:35.870108+00:00

Affected: parisneo/lollms-webui, parisneo lollms-webui

A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms-webui application, affecting versions up to the latest release before 9.5. The vulnerability arises due to insufficient sanitization of the 'config' parameter in the 'apply_settings' function, allowing an attacker to manipulate the application's configuration by sending specially crafted JSON payloads. This could lead to remote code execution (RCE) by bypassing existing patches designed to mitigate such vulnerabilities.