PyPI/lollms CVE-2024-6971: low 3.4, EPSS 0.32%

Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2026-1585
• https://nvd.nist.gov/vuln/detail/CVE-2024-6971
• https://github.com/ParisNeo/lollms/commit/aeace796d861e922133b769710019608a6363264
• https://github.com/ParisNeo/lollms
• https://huntr.com/bounties/fbfe7cd0-99fb-4305-bd07-8b573364109e
• https://pypi.org/project/lollms
• https://github.com/advisories/GHSA-7pgr-32fx-c6x9

CVE-2024-6971 · published 2026-07-07T14:34:43.099935Z · modified 2026-07-07T17:46:17.300771258Z · JSON