CVE-2024-6971

Advisory

Affected versions of the lollms-webui package are vulnerable to Path Traversal due to a lack of path sanitization in functions handling filesystem operations. The functions add_rag_database, toggle_mount_rag_database, and vectorize_folder in lollms_file_system.py do not employ sanitize_path_from_endpoint or sanitize_path, allowing crafted paths with directory traversal sequences. An attacker with local access and sufficient privileges can exploit this by invoking those functions on arbitrary .sqlite files outside the intended directory, potentially triggering unwanted package installations or causing application crashes and disruption.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-7pgr-32fx-c6x9
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6971