{"id":"CVE-2026-33340","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-33340","generatedAt":"2026-10-31T05:59:07.687Z","title":"A critical Server-Side Request Forgery (SSRF) vulnerability has been identified in all known existing versions of `lollms-webui`.","description":"LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems. A critical Server-Side Request Forgery (SSRF) vulnerability has been identified in all known existing versions of `lollms-webui`. The `@router.post(\"/api/proxy\")` endpoint allows unauthenticated attackers to force the server into making arbitrary GET requests. This can be exploited to access internal services, scan local networks, or exfiltrate sensitive cloud metadata (e.g., AWS/GCP IAM tokens). As of time of publication, no known patched versions are available.","published":"2026-03-24T17:16:44.000Z","lastModified":"2026-06-17T10:37:21.000Z","status":"Analyzed","sourceIdentifier":"security-advisories@github.com","cvss":{"version":"3.1","score":9.1,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"},"cwe":["CWE-306","CWE-918"],"affected":["lollms/lollms web ui"],"epss":{"score":0.21629,"percentile":0.97624,"date":"2026-10-30","history":[{"date":"2026-09-24","score":0.01662,"percentile":0.75651},{"date":"2026-10-25","score":0.21629,"percentile":0.97609}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 21.6%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-10-25T00:00:00.000Z","detail":{"to":0.21629,"from":0.01662,"percentile":0.97609},"summary":"EPSS moved from 1.7% to 21.6% probability of exploitation in the next thirty days."}],"references":[{"url":"https://github.com/ParisNeo/lollms-webui/blob/8c5dcef63d847bb3d027ec74915d8fe4afd3014e/lollms/server/endpoints/lollms_apps.py#L443-L450","tags":["Product"],"source":"security-advisories@github.com"},{"url":"https://github.com/ParisNeo/lollms-webui/security/advisories/GHSA-mcwr-5469-pxj4","tags":["Exploit","Mitigation","Vendor Advisory"],"source":"security-advisories@github.com"},{"url":"https://github.com/ParisNeo/lollms-webui/security/advisories/GHSA-mcwr-5469-pxj4","tags":["Exploit","Mitigation","Vendor Advisory"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-33340","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}