Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:54:47 +0000 CVE-2024-5824 — Path Traversal in parisneo/lollms https://cve.radiocsirt.org/vuln/cve-2024-5824 <p><strong>Affected:</strong> parisneo/lollms, parisneo lollms-webui</p> <p>A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`.</p> <p><strong>Affected:</strong> parisneo/lollms, parisneo lollms-webui</p> <p>A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`.</p> https://cve.radiocsirt.org/vuln/cve-2024-5824 GHSA-m45c-v46h-c788 — lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE https://cve.radiocsirt.org/vuln/ghsa-m45c-v46h-c788 <p><strong>Affected:</strong> PyPI: lollms</p> <p>A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`.</p> <p><strong>Affected:</strong> PyPI: lollms</p> <p>A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`.</p> https://cve.radiocsirt.org/vuln/ghsa-m45c-v46h-c788