What is the CVSS score of CVE-2026-0558?

CVE-2026-0558 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Lollms are affected by CVE-2026-0558?

Parisneo LOLLMS versions 2.2.0 and earlier contain an unauthenticated file upload vulnerability in the text extraction API endpoint that could allow attackers to exhaust system resources or access…. A patch is available.

Is there a public PoC exploit available for CVE-2026-0558?

Yes, a public proof-of-concept exploit is available for CVE-2026-0558. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-0558?

Within 24 hours: Identify all instances of LOLLMS ≤2.2.0 in your environment and restrict network access to the `/api/files/extract-text` endpoint via firewall or API gateway rules. Within 7 days: Upgrade all affected LOLLMS deployments to version 2.2.1 or later per vendor advisory. Within 30 days: Conduct audit logs review for the `/api/files/extract-text` endpoint to identify any suspicious file upload activity during the exposure window.

Lollms CVE-2026-0558

EUVD-2026-17035 CRITICAL

Improper Authentication (CWE-287)

2026-03-29 security@huntr.dev

Authentication Bypass Denial Of Service Information Disclosure Lollms

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 05:47 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

2.2.0

EUVD ID Assigned

Mar 29, 2026 - 18:22 euvd

EUVD-2026-17035

Analysis Generated

Mar 29, 2026 - 18:22 vuln.today

CVE Published

Mar 29, 2026 - 18:16 nvd

CRITICAL 9.8

DescriptionCVE.org

A vulnerability in parisneo/lollms, up to and including version 2.2.0, allows unauthenticated users to upload and process files through the /api/files/extract-text endpoint. This endpoint does not enforce authentication, unlike other file-related endpoints, and lacks the Depends(get_current_active_user) dependency. This issue can lead to denial of service (DoS) through resource exhaustion, information disclosure, and violation of the application's documented security policies.

AnalysisAI

Unauthenticated file upload in parisneo/lollms versions ≤2.2.0 enables remote attackers to submit arbitrary files for text extraction without authentication via the /api/files/extract-text endpoint. The vulnerability (CWE-287: Improper Authentication) allows resource exhaustion DoS attacks and potential information disclosure, with CVSS 7.5 (High) reflecting network-accessible attack surface requiring no privileges. EPSS data not available; no public exploit identified at time of analysis, though the simplicity (AC:L, PR:N) suggests trivial exploitation once endpoint details are known.

Technical ContextAI

The lollms framework (Large Language Model System) is a Python-based application for managing LLM interactions and file processing. The vulnerability stems from missing authentication dependency injection on the /api/files/extract-text API endpoint. While other file-handling endpoints in the application implement the Depends(get_current_active_user) FastAPI dependency to enforce user authentication, this specific endpoint was deployed without the security guard. The root cause maps to CWE-287 (Improper Authentication), where authentication mechanisms exist in the codebase but are inconsistently applied across the API surface. This creates an authentication bypass allowing unauthenticated HTTP clients to invoke file extraction functionality designed for authenticated users only, violating the application's documented security model and enabling abuse of server-side file processing resources.

RemediationAI

Upstream fix available via GitHub commit a6625dc83786ff21d109b0d545ca61b770607ef3, which adds the missing authentication dependency to the vulnerable endpoint. Users should upgrade to the patched version available from the parisneo/lollms repository following this commit. If immediate upgrade is not feasible, implement network-level access controls to restrict the /api/files/extract-text endpoint to authenticated internal networks only, using reverse proxy rules or firewall policies. For production deployments, verify that authentication is enforced by testing the endpoint with unauthenticated HTTP requests and confirming 401/403 responses. Review application logs for unauthorized access attempts to this endpoint prior to patching. Full vendor advisory and technical details available at https://huntr.com/bounties/0a722001-89ce-4c91-b6a6-a55ee5ba2113 and the referenced GitHub commit. Prioritize patching for internet-facing instances within 48-72 hours given the low exploitation complexity.