{
 "id": "AIR-2024-0141",
 "slug": "cve-2024-5443-lollms-path-traversal-remote-code-execution",
 "title": "CVE-2024-5443: Lollms path traversal remote code execution",
 "summary": "A path traversal vulnerability in lollms allows attackers to escape intended directories via inadequate input sanitization on endpoint parameters. This can lead to arbitrary code execution if malicious configurations are established.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "lollms"
 ],
 "incident_date": "2024-06-22",
 "incident_date_precision": "day",
 "first_reported": "2024-06-22",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-mvrm-fh8q-6wr2",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2024-5443: Remote Code Execution via path traversal bypass in lollms",
   "published_at": "2024-06-22"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2024-5443",
  "path_traversal",
  "lollms"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}