Vulnerability record · CVE-2024-1520 · published 10 April 2024
CVE-2024-1520: lollms-webui OS command injection in open_code_folder endpoint
Lollms · Lollms Web Ui
The parisneo/lollms-webui application fails to validate the discussion_id parameter in the /open_code_folder endpoint, allowing OS command injection. An unauthenticated network attacker can run arbitrary commands on the host, making this a critical remote code execution flaw.
Description
An OS Command Injection vulnerability exists in the '/open_code_folder' endpoint of the parisneo/lollms-webui application, due to improper validation of user-supplied input in the 'discussion_id' parameter. Attackers can exploit this vulnerability by injecting malicious OS commands, leading to unauthorized command execution on the underlying operating system. This could result in unauthorized access, data leakage, or complete system compromise.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Automated analysis
critical priorityUnauthenticated network-reachable OS command injection with CVSS 9.8 and high EPSS makes this an urgent patching priority.
What it is
The parisneo/lollms-webui application fails to validate the discussion_id parameter in the /open_code_folder endpoint, allowing OS command injection. An unauthenticated network attacker can run arbitrary commands on the host, making this a critical remote code execution flaw.
Impact
An attacker gains arbitrary command execution on the underlying operating system, enabling unauthorized access, data leakage, or full system compromise.
Attack surface
Reachable over the network via the /open_code_folder endpoint with no authentication or user interaction required, per the CVSS vector AV:N/AC:L/PR:N/UI:N. The discussion_id parameter carries the injected commands.
Exploitation
Not listed in CISA KEV, but EPSS is 0.48214 (98.8th percentile) and a public exploit reference exists, indicating meaningful exploitation likelihood.
What to do
- Apply the vendor patch commit 2497d1a4fe5a09f003bf7a9bc426139e9295a934 immediately.
- Do not expose lollms-webui to untrusted networks; restrict access to localhost or a trusted management network.
- Add authentication and input validation or allowlisting for the discussion_id parameter.
- Run the service with least privilege and in a sandboxed or containerized environment to limit command execution impact.
Detection
- Monitor web logs for requests to /open_code_folder with suspicious characters in discussion_id (;, |, &&, backticks, $()).
- Alert on unexpected child processes spawned by the lollms-webui service, especially shells or system utilities.
- Review host process telemetry for command execution originating from the web application user context.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://github.com/parisneo/lollms-webui/commit/2497d1a4fe5a09f003bf7a9bc426139e9295a934 | Patch |
| https://huntr.com/bounties/405c2059-3fe9-4233-8eed-741ec847d181 | ExploitThird Party Advisory |
| https://github.com/parisneo/lollms-webui/commit/2497d1a4fe5a09f003bf7a9bc426139e9295a934 | Patch |
| https://huntr.com/bounties/405c2059-3fe9-4233-8eed-741ec847d181 | ExploitThird Party Advisory |
Track CVE-2024-1520 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2024-1520), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
