CVE-2026-0560 Server-Side Request Forgery (SSRF) in parisneo/lollms
Attackers can exploit an SSRF vulnerability in the file export endpoint to access internal services and potentially execute remote code.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-0560?
CVE-2026-0560 is a high-severity server-side request forgery vulnerability in parisneo/lollms, published on 29 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the `/api/files/export-content` endpoint. The `_download_image_to_temp()` function in `backend/routers/files.py` fails to validate user-controlled URLs, allowing attackers to make arbitrary HTTP requests to internal services and cloud metadata endpoints. This vulnerability can lead to internal network access, cloud metadata access, information disclosure, port scanning, and potentially remote code execution.
Weakness: CWE-918
Which versions are affected by CVE-2026-0560?
1 open source package ship an affected version, including lollms. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
lollms PyPI | All versions | 2.1.1 |
Products include Lollms Lollms.
How do I fix CVE-2026-0560?
Upgrade lollms to 2.1.1 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-0560 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-0560 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in parisneo/lollms
- CVE-2026-1114 Improper Access Control via Weak JWT Token in parisneo/lollms
- CVE-2024-3429 Path Traversal in parisneo/lollms
- CVE-2026-1115 Stored XSS in parisneo/lollms
- CVE-2026-12228 Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms
- CVE-2026-0562 Insecure Direct Object Reference (IDOR) in parisneo/lollms
Sources
Also known as GHSA-rqmp-494m-8qgf, PYSEC-2026-2199.