CVE-2024-4322: Lollms Web UI Path Traversal Vulnerability

CVE-2024-4322 Overview

CVE-2024-4322 is a path traversal vulnerability in the parisneo/lollms-webui application. The flaw resides in the /list_personalities endpoint, where the category parameter is passed to the list_personalities function without proper sanitization. An unauthenticated remote attacker can manipulate this parameter with traversal sequences to enumerate arbitrary directories on the host filesystem. The vulnerability affects the latest version of the application at the time of disclosure and is tracked under [CWE-29] (Path Traversal: \..\filename). Successful exploitation results in disclosure of directory structures across mounted drives, exposing information that supports further attacks.

Critical Impact
Unauthenticated attackers can list arbitrary directories on the host system by supplying crafted values to the category parameter, enabling reconnaissance and information disclosure.

Affected Products

parisneo/lollms-webui (Lollms Web UI)
/list_personalities endpoint in the list_personalities function
Latest release available at the time of disclosure

Discovery Timeline

2024-05-16 - CVE-2024-4322 published to NVD
2026-06-17 - Last updated in NVD database

Technical Details for CVE-2024-4322

Vulnerability Analysis

The parisneo/lollms-webui application exposes a /list_personalities HTTP endpoint that enumerates personality configurations stored under a category directory. The endpoint accepts a category parameter from the request and uses it to construct a filesystem path passed to a directory listing routine. Because the input is not validated or normalized against a permitted base directory, an attacker can inject relative traversal sequences such as ../ or supply absolute paths. The server then lists the contents of the resolved location and returns the results in the HTTP response.

The endpoint is reachable over the network without authentication. The impact is limited to confidentiality: the attacker learns file and directory names, but the endpoint does not read file contents or write to disk through this code path.

Root Cause

The root cause is improper handling of user-supplied input in the list_personalities function. The category value is concatenated into a filesystem path without canonicalization or an allowlist check that constrains lookups to the personalities directory. Any string the client provides is treated as a valid directory reference, which is the defining condition of [CWE-29].

Attack Vector

An attacker sends an HTTP GET request to /list_personalities with a category parameter containing traversal sequences that escape the personalities directory, or an absolute path such as /etc or C:\. The server returns the directory listing. No authentication, user interaction, or special privileges are required. See the Huntr Bounty Overview for the disclosed proof-of-concept details.

No verified public exploit code is republished here. The EPSS score of 30.987% (98th percentile) indicates elevated real-world exploitation likelihood relative to the broader CVE population.

Detection Methods for CVE-2024-4322

Indicators of Compromise

HTTP requests to /list_personalities containing category values with ../, ..\, URL-encoded traversal sequences (%2e%2e%2f), or absolute paths
Web server access logs showing repeated /list_personalities requests from a single source enumerating multiple category values
Outbound responses from lollms-webui containing directory names that do not match the application's personalities hierarchy

Detection Strategies

Deploy web application firewall rules that flag path traversal patterns in query parameters targeting the /list_personalities route
Correlate HTTP access logs with process telemetry to identify filesystem enumeration originating from the lollms-webui process
Alert on responses from the endpoint whose payload size or entry count deviates from a baseline of legitimate category listings

Monitoring Recommendations

Forward lollms-webui application and reverse-proxy logs to a centralized log platform for retention and query
Monitor for anomalous read access by the lollms-webui service account to directories outside its expected working paths
Track network egress from the host running lollms-webui for signs of follow-on data collection after reconnaissance

How to Mitigate CVE-2024-4322

Immediate Actions Required

Update parisneo/lollms-webui to a version that patches the list_personalities function per the Huntr disclosure
Restrict network exposure of the lollms-webui service to trusted networks or place it behind an authenticating reverse proxy
Review filesystem permissions so the lollms-webui process account cannot read sensitive directories on the host

Patch Information

A fix is tracked through the Huntr bounty program. Refer to the Huntr Bounty Overview for the associated pull request and remediated release. Confirm the deployed version resolves the category parameter against a canonical base path and rejects any resolved path outside that base.

Workarounds

Block or filter requests to /list_personalities that contain .., encoded traversal sequences, or absolute path prefixes at the reverse proxy or WAF layer
Run lollms-webui inside a container or sandbox with a read-only, minimal filesystem view so directory enumeration returns no sensitive data
Disable the /list_personalities route where it is not required for the deployed use case

bash

# Example nginx snippet to block traversal patterns on the vulnerable endpoint
location /list_personalities {
    if ($arg_category ~* "(\.\./|\.\.\\|%2e%2e|^/|^[A-Za-z]:)") {
        return 400;
    }
    proxy_pass http://lollms_backend;
}