File Upload Vulnerability in parisneo/lollms Affected by Inadequate Authentication

CVE-2026-0558

What is CVE-2026-0558?

A vulnerability in parisneo/lollms allows unauthenticated users to upload and process files via the /api/files/extract-text endpoint, which lacks proper authentication checks. This misconfiguration can result in resource exhaustion, potential denial of service (DoS), and the risk of exposing sensitive information, undermining the security protocols stated by the application. Immediate attention is necessary to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References