CVE-2024-2624

A path traversal and arbitrary file upload vulnerability exists in the parisneo/lollms-webui application, specifically within the `@router.get("/switch_personal_path")` endpoint in `./lollms-webui/lollms_core/lollms/server/endpoints/lollms_user.py`. The vulnerability arises due to insufficient sanitization of user-supplied input for the `path` parameter, allowing an attacker to specify arbitrary file system paths. This flaw enables direct arbitrary file uploads, leakage of `personal_data`, and overwriting of configurations in `lollms-webui`->`configs` by exploiting the same named directory in `personal_data`. The issue affects the latest version of the application and is fixed in version 9.4. Successful exploitation could lead to sensitive information disclosure, unauthorized file uploads, and potentially remote code execution by overwriting critical configuration files.

• CWE-29
• CWE-22

• https://github.com/parisneo/lollms-webui/commit/aeba79f3ea934331b8ecd625a58bae6e4f7e7d3fPatch
• https://huntr.com/bounties/39e17897-0e92-4473-91c7-f728322191aaExploit, Third Party Advisory
• https://github.com/parisneo/lollms-webui/commit/aeba79f3ea934331b8ecd625a58bae6e4f7e7d3fPatch
• https://huntr.com/bounties/39e17897-0e92-4473-91c7-f728322191aaExploit, Third Party Advisory

Published

Jun 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-26234Proxy Driver Spoofing Vulnerability6.7
• CVE-2024-26235Windows Update Stack Elevation of Privilege Vulnerability7.8
• CVE-2024-26236Windows Update Stack Elevation of Privilege Vulnerability7
• CVE-2024-26237Windows Defender Credential Guard Elevation of Privilege Vul…7.8
• CVE-2024-26238Microsoft PLUGScheduler Scheduled Task Elevation of Privileg…7.8
• CVE-2024-26239Windows Telephony Server Elevation of Privilege Vulnerabilit…7.8
• CVE-2024-26240Secure Boot Security Feature Bypass Vulnerability8
• CVE-2024-26241Win32k Elevation of Privilege Vulnerability7.8
• CVE-2024-26242Windows Telephony Server Elevation of Privilege Vulnerabilit…7
• CVE-2024-26243Windows USB Print Driver Elevation of Privilege Vulnerabilit…7
• CVE-2024-26244Microsoft WDAC OLE DB provider for SQL Server Remote Code Ex…8.8
• CVE-2024-26245Windows SMB Elevation of Privilege Vulnerability7.8