GitStock

parisneo/lollms · Security

Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py

Open GitHub
GHSA ID
GHSA-7pgr-32fx-c6x9
CVE ID
CVE-2024-6971
Severity
low
Published
Updated
CVSS
3.4 · CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
CVSS v3
3.4 · CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
CVSS v4
1.8 · CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A path traversal vulnerability exists in the ParisNeo/lollms repository, specifically in the lollms_file_system.py file. The functions add_rag_database, toggle_mount_rag_database, and vectorize_folder do not implement security measures such as sanitize_path_from_endpoint or sanitize_path. This allows an attacker to perform vectorize operations on .sqlite files in any directory on the victim's computer, potentially installing multiple packages and causing a crash.

CWEs

  • CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References