CVE-2026-0560CWE-918

Server-Side Request Forgery (SSRF) in parisneo/lollms

High · published March 29, 2026

CVSS v3.0
7.5
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the `/api/files/export-content` endpoint. The `_download_image_to_temp()` function in `backend/routers/files.py` fails to validate user-controlled URLs, allowing attackers to make arbitrary HTTP requests to internal services and cloud metadata endpoints. This vulnerability can lead to internal network access, cloud metadata access, information disclosure, port scanning, and potentially remote code execution.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01765 · 77.9th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-03-29T17:51Z
EPSS history
Timeline
  • 29 MAR 17:51Z
    Server-Side Request Forgery (SSRF) in parisneo/lollms
    cvelistv5