CVE-2026-0560: Server-Side Request Forgery (SSRF) in parisneo/lollms
A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the /api/files/export-content endpoint. The downloadimagetotemp() function in backend/routers/files.py fails to validate user-controlled URLs, allowing attackers to make arbitrary HTTP requests to internal services and cloud metadata endpoints. This vulnerability can lead to internal network access, cloud metadata access, information disclosure, port scanning, and potentially remote code execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0560?
CVE-2026-0560 is classified as a medium severity vulnerability due to its potential impact on application security.
How do I fix CVE-2026-0560?
To fix CVE-2026-0560, upgrade to parisneo/lollms version 2.2.0 or later, which addresses the SSRF vulnerability.
What specifically is affected by CVE-2026-0560?
CVE-2026-0560 affects the `/api/files/export-content` endpoint in parisneo/lollms versions prior to 2.2.0.
What kind of attack can occur due to CVE-2026-0560?
CVE-2026-0560 can lead to Server-Side Request Forgery (SSRF) attacks, allowing attackers to make unauthorized requests from the vulnerable server.
Which versions of parisneo/lollms are impacted by CVE-2026-0560?
CVE-2026-0560 impacts all versions of parisneo/lollms prior to 2.2.0.