CVE-2026-10595 Path Traversal Vulnerability in parisneo/lollms
An unauthenticated attacker can read arbitrary files on the server via path traversal in the SPA catch-all route of lollms.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-10595?
CVE-2026-10595 is a high-severity path traversal vulnerability in parisneo/lollms, published on 9 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vulnerability arises from the improper handling of user-controlled path input, which is directly joined into a filesystem path without sanitization or containment checks. URL-encoded dot-dot sequences (`%2e%2e`) bypass Starlette's built-in path normalization and are resolved by Python's `pathlib`, allowing an unauthenticated attacker to read arbitrary files on the server. This issue has been resolved in version 3.
Weakness: CWE-23
Which versions are affected by CVE-2026-10595?
How do I fix CVE-2026-10595?
No fix has been published for CVE-2026-10595 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-10595 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-10595 exists.
Sources
Also known as GHSA-37c2-pxv8-c2mx.