GitHub Advisoryadvisory · PyPI

GHSA-pwc9-q4hj-pg8g LoLLMS Command Injection vulnerability

HIGH Published 2024-05-16 Modified 2024-09-13 Official page ↗
Aliases
CVE-2024-4078
Ecosystem
PyPI
Packages
lollms
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77
Reviewed
2024-09-13

Affected packages

• PyPI lollms: < 9.5.0 → fixed in 9.5.0

Description

A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the `name` parameter in the `unInstall_binding` function, allowing an attacker to traverse directories and execute arbitrary code by loading a malicious `__init__.py` file. This vulnerability affects the latest version of the software. The exploitation of this vulnerability could lead to remote code execution on the system where parisneo/lollms is deployed.

Related

Alias · CVE (1)

  • CVE-2024-4078 A vulnerability in the parisneo/lollms, specifically in the `/unInstall_binding` endpoint, allows for arbitrary code execution due to… vulnerability

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References