CVE-2026-12228 Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms
An attacker can inject malicious scripts into direct messages via prompt sharing, leading to arbitrary JavaScript execution and potential account takeover in lollms.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-12228?
CVE-2026-12228 is a high-severity cross-site scripting vulnerability in parisneo/lollms, published on 18 Jul 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint of parisneo/lollms (latest version). The endpoint stores attacker-controlled `prompt_content` into `DBDirectMessage.content` without server-side sanitization. When a victim opens the direct message (DM) thread, the message is rendered by the DM UI through `MessageContentRenderer`, which uses `v-html` to insert rendered HTML into the DOM. The frontend sanitizer, which is regex-based, fails to comprehensively sanitize attacker-controlled HTML, allowing malicious payloads to execute in the victim's browser context. This vulnerability enables any authenticated user to send a malicious prompt-share message to another user's inbox, leading to arbitrary JavaScript execution, authenticated actions as the victim, exposure of same-origin application data, and potential account takeover.
Weakness: CWE-79
Which versions are affected by CVE-2026-12228?
It affects 1 product.
Products include Lollms Lollms.
How do I fix CVE-2026-12228?
No fix has been published for CVE-2026-12228 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2026-12228 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-12228 exists.
Other vulnerabilities in parisneo/lollms
- CVE-2026-1114 Improper Access Control via Weak JWT Token in parisneo/lollms
- CVE-2024-3429 Path Traversal in parisneo/lollms
- CVE-2026-1115 Stored XSS in parisneo/lollms
- CVE-2026-0562 Insecure Direct Object Reference (IDOR) in parisneo/lollms
- CVE-2026-1116 Cross-site Scripting (XSS) in parisneo/lollms
Sources
Also known as GHSA-vh8r-6pw6-wv4f.