CVE-2026-33340
Published: 24 March 2026
Summary
CVE-2026-33340 is a critical-severity Missing Authentication for Critical Function (CWE-306) vulnerability in Lollms Lollms Web Ui. Its CVSS base score is 9.1 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 2.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and SC-7 (Boundary Protection).
Deeper analysis
LoLLMs WEBUI, the web interface for the Lord of Large Language and Multi modal Systems project, contains a critical Server-Side Request Forgery vulnerability in every known version. The flaw resides in the unauthenticated POST /api/proxy endpoint, which accepts attacker-supplied URLs and causes the server to issue arbitrary GET requests on their behalf. The issue is tracked as CVE-2026-33340 with a CVSS 3.1 score of 9.1 and is associated with CWE-306 and CWE-918.
Unauthenticated remote attackers can exploit the endpoint to reach internal services, perform network reconnaissance from the server’s perspective, or retrieve sensitive cloud-instance metadata such as AWS or GCP IAM credentials. Because the requests originate from the LoLLMs server itself, they may bypass firewalls or authentication mechanisms that would otherwise protect those resources.
Public advisories published in the project’s GitHub repository state that no patched versions are available at the time of disclosure and recommend restricting network access to the web UI until a fix is released.
The EPSS score reached a peak of 0.1626 after disclosure before settling at its current value of 0.1277, indicating a noticeable increase in exploitation interest following publication.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-14928
Vulnerability details
LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems. A critical Server-Side Request Forgery (SSRF) vulnerability has been identified in all known existing versions of `lollms-webui`. The `@router.post("/api/proxy")` endpoint allows unauthenticated attackers to…
more
force the server into making arbitrary GET requests. This can be exploited to access internal services, scan local networks, or exfiltrate sensitive cloud metadata (e.g., AWS/GCP IAM tokens). As of time of publication, no known patched versions are available.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SSRF vulnerability in unauthenticated public-facing /api/proxy endpoint directly enables exploitation of public-facing application (T1190), facilitates internal network service discovery via local network scanning (T1046), and exfiltration of cloud instance metadata credentials such as IAM tokens (T1552.005).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly enforces authentication and authorization on the /api/proxy endpoint so that unauthenticated attackers cannot trigger arbitrary server-side requests.
Restricts network exposure of the LoLLMs WEBUI, preventing external attackers from reaching the unauthenticated proxy endpoint as recommended in the disclosure advisory.
Requires validation of the user-supplied URL parameter to the /api/proxy endpoint, blocking the arbitrary external and internal requests that constitute the SSRF.