CVE-2024-4322
Lollms Web Ui ≤ 9.8
Raw vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NSummary
CVE-2024-4322 is a high-severity Path Traversal: '\..\filename' (CWE-29) vulnerability in Lollms Lollms Web Ui. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique File and Directory Discovery (T1083); ranked in the top 2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
This vulnerability is AI-related — categorised as LLM Application Platforms; in the Privacy and Disclosure risk domain; MITRE ATLAS techniques in scope: AML.T0013.000, AML.T0014.000, AML.T0015.000.
The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and SI-10 (Information Input Validation) — see the control section below for these in your framework.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically in the /list_personalities endpoint. Manipulation of the category parameter allows an attacker to traverse the directory structure and list arbitrary directories on the underlying system. The issue stems from improper handling of user-supplied input in the list_personalities function and affects the latest version of the application. It is tracked as CWE-29 with a CVSS 3.0 score of 7.5.
An unauthenticated remote attacker can exploit the flaw over the network without user interaction or credentials. Successful exploitation yields disclosure of folder listings across the system drive, potentially exposing sensitive directory structures and file organization.
The vulnerability was reported through huntr.com bounties at the referenced URLs, which document the path traversal vector but do not detail available patches or configuration mitigations. The associated EPSS score reached a peak of 0.5533 before receding to the current value of 0.4516.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-43965
Vulnerability Data
A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `/list_personalities` endpoint. By manipulating the `category` parameter, an attacker can traverse the directory structure and list any directory on the system. This issue affects the latest version of…
more
the application. The vulnerability is due to improper handling of user-supplied input in the `list_personalities` function, where the `category` parameter can be controlled to specify arbitrary directories for listing. Successful exploitation of this vulnerability could allow an attacker to list all folders in the drive on the system, potentially leading to information disclosure.
- CWE(s)
AI Security AnalysisAI
- AI Category
- LLM Application Platforms
- Risk Domain
- Privacy and Disclosure
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- The vulnerability affects parisneo/lollms-webui, a web user interface for Lord of Large Language Models (LOLLLMS), which is an open-source platform for running and interacting with LLMs, fitting under 'Other Platforms' as it is neither a framework, library, nor specific to NLP/Transformers, CV, etc., but a broader AI deployment platform.
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The path traversal vulnerability in the /list_personalities endpoint allows attackers to list arbitrary directories on the system, directly enabling File and Directory Discovery (T1083).
Likely ATT&CK TechniquesAI
Techniques this vulnerability likely enables, inferred from its description, weakness type, and attributed-actor tradecraft. Confidence is per-technique.
MITRE ATLAS TechniquesAI
MITRE ATLAS techniques
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
Mitigating Controls (NIST 800-53 r5) AI
Rejects or sanitizes the untrusted category parameter before it reaches list_personalities, blocking path-traversal sequences that expose arbitrary directories.
Enforces that only explicitly authorized paths may be listed, denying the unauthenticated request that would otherwise traverse outside the intended personalities folder.
Monitors inbound requests and outbound directory listings for anomalous traversal patterns or excessive folder enumeration originating from the /list_personalities endpoint.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Secure SDLC practices directly require input validation and path sanitization that block this traversal vector.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Security testing can discover path-traversal flaws but does not itself prevent them in production code.
Application security requirements can mandate input validation and path canonicalization to block traversal sequences.
Secure architecture principles include directory sandboxing and safe file-access design that mitigate path traversal.
Secure coding standards directly require neutralizing path traversal sequences such as '\..\filename'.