Path Traversal in parisneo/lollms

Vulnerability

Description

A path traversal vulnerability exists in the parisneo/lollms application, specifically within the sanitize_path_from_endpoint and sanitize_path functions in lollms_core\lollms\security.py [1]. The issue arises due to insufficient sanitization of user-supplied input, enabling attackers to bypass path traversal protection mechanisms when the application is running on Windows [3].

Exploitation

Attackers can craft malicious input to navigate outside restricted directories, allowing arbitrary file reading. The vulnerability is exploitable without requiring authentication, as the endpoints that invoke these functions do not enforce access controls on file paths [1][3].

Impact

Successful exploitation could lead to unauthorized access to sensitive files, information disclosure, and potentially a denial of service (DoS) condition by including numerous large or resource-intensive files [1].

Mitigation

The vulnerability affects all versions prior to 9.6. Users should update to the latest patched version to mitigate the risk [1].