{
 "id": "AIR-2024-0239",
 "slug": "cve-2024-2548-path-traversal-vulnerability-in-lollms-web-ui",
 "title": "CVE-2024-2548: Path Traversal Vulnerability in Lollms Web UI",
 "summary": "A path traversal vulnerability in the Windows version of Lollms allows attackers to read arbitrary system files via crafted requests. The flaw stems from inadequate path validation between Windows and Linux environments.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "lollms-webui"
 ],
 "incident_date": "2024-06-06",
 "incident_date_precision": "day",
 "first_reported": "2024-06-06",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2548",
   "publisher": "NVD",
   "title": "CVE-2024-2548: A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the…",
   "published_at": "2024-06-06"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2024-2548",
  "path-traversal"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}