CVE-2024-4326

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-4326
A vulnerability in parisneo/lollms-webui versions up to 9.3 allows remote attackers to execute arbitrary code. The vulnerability stems from insufficient protection of the `/apply_settings` and `/execute_code` endpoints. Attackers can bypass protections by setting the host to localhost, enabling code execution, and disabling code validation through the `/apply_settings` endpoint. Subsequently, arbitrary commands can be executed remotely via the `/execute_code` endpoint, exploiting the delay in settings enforcement. This issue was addressed in version 9.5.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/parisneo/lollms-webui/commit/abb4c6d495a95a3ef5b114ffc57f85cd650b905e Patch
https://huntr.com/bounties/2ab9f03d-0538-4317-be21-0748a079cbdd Exploit Third Party Advisory Issue Tracking Patch
https://github.com/parisneo/lollms-webui/commit/abb4c6d495a95a3ef5b114ffc57f85cd650b905e Patch
https://huntr.com/bounties/2ab9f03d-0538-4317-be21-0748a079cbdd Exploit Third Party Advisory Issue Tracking Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:lollms:lollms_web_ui:*:*:*:*:*:*:*:*
History

09 Jul 2025, 14:29

Type Values Removed Values Added
References () https://github.com/parisneo/lollms-webui/commit/abb4c6d495a95a3ef5b114ffc57f85cd650b905e - () https://github.com/parisneo/lollms-webui/commit/abb4c6d495a95a3ef5b114ffc57f85cd650b905e - Patch
References () https://huntr.com/bounties/2ab9f03d-0538-4317-be21-0748a079cbdd - () https://huntr.com/bounties/2ab9f03d-0538-4317-be21-0748a079cbdd - Exploit, Third Party Advisory, Issue Tracking, Patch
First Time Lollms
Lollms lollms Web Ui
CPE cpe:2.3:a:lollms:lollms_web_ui:*:*:*:*:*:*:*:*

21 Nov 2024, 09:42

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad en las versiones parisneo/lollms-webui hasta 9.3 permite a atacantes remotos ejecutar código arbitrario. La vulnerabilidad se debe a una protección insuficiente de los endpoints `/apply_settings` y `/execute_code`. Los atacantes pueden eludir las protecciones configurando el host en localhost, habilitando la ejecución de código y deshabilitando la validación de código a través del endpoint `/apply_settings`. Posteriormente, se pueden ejecutar comandos arbitrarios de forma remota a través del endpoint `/execute_code`, aprovechando el retraso en la aplicación de la configuración. Este problema se solucionó en la versión 9.5.
References () https://github.com/parisneo/lollms-webui/commit/abb4c6d495a95a3ef5b114ffc57f85cd650b905e - () https://github.com/parisneo/lollms-webui/commit/abb4c6d495a95a3ef5b114ffc57f85cd650b905e -
References () https://huntr.com/bounties/2ab9f03d-0538-4317-be21-0748a079cbdd - () https://huntr.com/bounties/2ab9f03d-0538-4317-be21-0748a079cbdd -

16 May 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-16 09:15

Updated : 2025-07-09 14:29

NVD link : CVE-2024-4326

Mitre link : CVE-2024-4326

CVE.ORG link : CVE-2024-4326

JSON object : View

Products Affected

lollms

  • lollms_web_ui
CWE
CWE-15

External Control of System or Configuration Setting