CVE-2026-1116 Cross-site Scripting (XSS) in parisneo/lollms

High 8.2 Published 12 Apr 2026 Updated 13 Apr 2026

Attackers can inject malicious scripts via unsanitized content fields, leading to account takeover or session hijacking in lollms applications.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2026-1116?

CVE-2026-1116 is a high-severity cross-site scripting vulnerability in parisneo/lollms, published on 12 Apr 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack of sanitization or HTML encoding of the `content` field when deserializing user-provided data. This allows an attacker to inject malicious HTML or JavaScript payloads, which can be executed in the context of another user's browser. Exploitation of this vulnerability can lead to account takeover, session hijacking, or wormable attacks.

Weakness: CWE-79

Which versions are affected by CVE-2026-1116?

1 open source package ship an affected version, including lollms. It affects 1 product.

Package	Affected	Fixed in
`lollms` PyPI	All versions	`2.1.1`

Products include Lollms Lollms.

How do I fix CVE-2026-1116?

Upgrade lollms to 2.1.1 or later.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2026-1116 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-1116 exists.

Sources

Also known as GHSA-w676-j9x4-3hq2, PYSEC-2026-2200.