← Vulnerability feed

Vulnerability record · CVE-2024-1646 · published 16 April 2024

CVE-2024-1646: Lollms-webui authentication bypass via alternate path vulnerability

Lollms · Lollms Webui

parisneo/lollms-webui is vulnerable to authentication bypass due to insufficient protection over sensitive endpoints. The application checks if the host parameter is not '0.0.0.0' to restrict access, which is inadequate when the application is bound to a specific interface, allowing unauthorized access to endpoints such as '/restart_program', '/update_software', '/check_update', '/start_recording', and '/stop_recording'. This vulnerability can lead to denial of service, unauthorized disabling or overriding of recordings, and potentially other impacts if certain features are enabled in the configuration.

8.2 CVSS 3.0 High EPSS 0.70% · top 48.7% CWE-288 · Authentication bypass via alternate path
8.2CVSS 3.0 base score
0.70%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

parisneo/lollms-webui is vulnerable to authentication bypass due to insufficient protection over sensitive endpoints. The application checks if the host parameter is not '0.0.0.0' to restrict access, which is inadequate when the application is bound to a specific interface, allowing unauthorized access to endpoints such as '/restart_program', '/update_software', '/check_update', '/start_recording', and '/stop_recording'. This vulnerability can lead to denial of service, unauthorized disabling or overriding of recordings, and potentially other impacts if certain features are enabled in the configuration.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/parisneo/lollms-webui/commit/02e829b5653a1aa5dbbe9413ec84f96caa1274e8 Patch
https://huntr.com/bounties/2f769c46-aa85-4ab8-8b08-fe791313b7ba ExploitThird Party Advisory
https://github.com/parisneo/lollms-webui/commit/02e829b5653a1aa5dbbe9413ec84f96caa1274e8 Patch
https://huntr.com/bounties/2f769c46-aa85-4ab8-8b08-fe791313b7ba ExploitThird Party Advisory

Track CVE-2024-1646 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-4267Lollms-webui command injection vulnerabilityA remote code execution (RCE) vulnerability exists in the parisneo/lollms-webui, specifically within the 'open_file' module, version 9.5. The vulnera…EPSS 1.5%9.8CVE-2024-1601Lollms-webui sql injection vulnerabilityAn SQL injection vulnerability exists in the `delete_discussion()` function of the parisneo/lollms-webui application, allowing an attacker to delete …EPSS 40%8.8CVE-2024-4403Lollms-webui cross-site request forgery vulnerabilityA Cross-Site Request Forgery (CSRF) vulnerability exists in the restart_program function of the parisneo/lollms-webui v9.6. This vulnerability allows…EPSS 0.17%7.5CVE-2024-1569Lollms-webui uncontrolled resource consumption vulnerabilityparisneo/lollms-webui is vulnerable to a denial of service (DoS) attack due to uncontrolled resource consumption. Attackers can exploit the `/open_co…EPSS 0.78%7.3CVE-2024-5125Lollms-webui cross-site scripting vulnerabilityparisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting (XSS) and Open Redirect due to inadequate input validation and processing of …EPSS 0.32%4.4CVE-2024-6971Lollms-webui path traversal vulnerabilityA path traversal vulnerability exists in the parisneo/lollms-webui repository, specifically in the `lollms_file_system.py` file. The functions `add_r…EPSS 0.32%3.3CVE-2024-4839Lollms-webui cross-site request forgery vulnerabilityA Cross-Site Request Forgery (CSRF) vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the l…EPSS 0.16%3.3CVE-2024-4841Lollms-webui vulnerabilityA Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'add_reference_to_local_mode' function due to the lack of…EPSS 0.67%

Source: NIST National Vulnerability Database (record CVE-2024-1646), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.