CVE-2024-6281: Path Traversal in lollms

The path traversal vulnerability in lollms arises from insufficient sanitization of the discussiondbname parameter within the apply_settings function. An attacker can craft malicious input to bypass the intended path restrictions, effectively writing files to arbitrary locations on the system. This could include overwriting configuration files, injecting malicious code, or exfiltrating sensitive data. The potential impact extends beyond the lollms application itself, potentially compromising the entire host system if the attacker gains sufficient privileges. This vulnerability shares similarities with other path traversal exploits where improper input validation allows attackers to navigate outside of intended directories.

1. Reserved2024-06-23
2. Published2024-07-20
3. Modified2025-10-15
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-6281 is to immediately upgrade to version 9.5.1 of lollms. If upgrading is not immediately feasible, consider implementing temporary workarounds. Restrict file access permissions for the lollms user account to the absolute minimum required. Implement strict input validation on the discussiondbname parameter, ensuring it only contains expected characters and does not include path traversal sequences (e.g., ../). Consider using a Web Application Firewall (WAF) to filter out malicious requests. After upgrading, verify the fix by attempting to access a restricted file via the discussiondbname parameter and confirming that access is denied.