CVE-2024-2361

The vulnerability is located in the `install_model()` function in the `lollms_core/lollms/binding.py` file. The application does not properly filter the `file://` protocol or other user-supplied values. By manipulating the `path` and `variant_name` parameters, an attacker can perform a path traversal attack, breaking out of the permitted application directory. As a result, it is possible to both read arbitrary files from the server's file system and write (upload) malicious files to any location on the server.

An attacker can read arbitrary files from the server (including potentially credentials, private keys, or configurations) and write files anywhere in the file system, which can lead to full server compromise (RCE via malicious file writes).

Patches available from the vendor should be applied according to the references (https://huntr.com/bounties/cd383817-924a-445a-838e-d0c867c6a176). Until the update is deployed, it is recommended to restrict access to the application only to trusted networks and monitor unauthorized file system access attempts.

The latest version of parisneo/lollms-webui available at the time of vulnerability disclosure (2024-05-16); specific version numbers are indicated in the vendor's references.