Auth bypass in Lollms Web Ui
CVE-2026-33340
LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems. A critical Server-Side Request Forgery (SSRF) vulnerability has been identified in all known existing versions of `lollms-webui`. The `@router.post("/api/proxy")` endpoint allows unauthenticated attackers to force the server into making arbitrary GET requests. This can be exploited to access internal services, scan local networks, or exfiltrate sensitive cloud metadata (e.g., AWS/GCP IAM tokens). As of time of publication, no known patched versions are available.
Vulnerability class: Broken Authentication
EPSS: 0.216 (97.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Lollms Lollms_web_ui
- Parisneo Lollms-webui — versions <= 8c5dcef63d847bb3d027ec74915d8fe4afd3014e
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM, Exploit, Mitigation, Vendor Advisory)
- security-advisories@github.com (Product, x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-33340?
- CVE-2026-33340 is a critical-severity vulnerability in Lollms Web Ui, classified under Missing Authentication for Critical Function. CVSS score: 9.1/10. Published 2026-03-24.
- How severe is CVE-2026-33340?
- Critical severity. CVSS v3 base score is 9.1 out of 10.
- Is CVE-2026-33340 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.