AI Threat Alert

LoLLMs

pip ML UI

6

Total CVEs

0

Critical

pip

Ecosystem

Feb 2, 2026

Last CVE

Known Vulnerabilities (6 shown)

Severity CVE ID Summary CVSS Published

LOW CVE-2024-6971 lollms: path traversal in RAG database functions 3.4 Oct 11, 2024 MEDIUM CVE-2024-6985 lollms: path traversal allows arbitrary directory read 4.4 Oct 11, 2024 MEDIUM CVE-2024-6581 Lollms: SVG upload XSS enables session hijack and RCE 6.5 Oct 29, 2024 HIGH CVE-2024-6982 lollms: RCE via eval() sandbox bypass in Calculate 8.4 Mar 20, 2025 HIGH CVE-2025-6386 lollms: timing attack enables credential enumeration 7.5 Jul 7, 2025 HIGH CVE-2026-1117 lollms: Access Control bypass enables privilege escalation 8.2 Feb 2, 2026

Monitor LoLLMs in your stack

Get instant alerts when new vulnerabilities affect LoLLMs. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring