PT-2026-1064 · Lollms · Lollms

Published 2025-12-29 · Updated 2026-04-22 · CVE-2026-0560

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions parisneo/lollms versions prior to 2.2.0

Description A Server-Side Request Forgery (SSRF) issue exists in the /api/files/export-content endpoint. The download image to temp() function in backend/routers/files.py does not properly validate user-supplied URLs, which allows attackers to initiate arbitrary HTTP requests to internal services and cloud metadata endpoints. This can result in internal network access, cloud metadata access, information disclosure, port scanning, and potentially remote code execution.

Recommendations Update to version 2.2.0 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2026-06469

CVE-2026-0560

Affected Products

Lollms

References · 8

• 🔥 https://huntr.com/bounties/65e43a5e-b902-4369-b738-1825285a3ea5 · Exploit
• https://github.com/parisneo/lollms/commit/76a54f0df2df8a5b254aa627d487b5dc939a0263 · Patch
• https://bdu.fstec.ru/vul/2026-06469 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-0560 · Security Note
• https://twitter.com/CVEnew/status/2038516979213246682 · Twitter Post
• https://twitter.com/pdnuclei_bot/status/2046831402646491340 · Twitter Post
• https://twitter.com/aydinnyunuss/status/2007051547474337840 · Twitter Post
• https://twitter.com/N45HTOfficial/status/2047007455771865156 · Twitter Post