Parisneo Lollms Path Traversal Vulnerability in Web UI

A relative path traversal vulnerability has been identified in the sanitize_path function of Parisneo Lollms Web UI version 10 through latest. This vulnerability allows attackers to bypass path sanitization by using relative paths, such as './', potentially leading to unauthorized access to directories within the personality_folder on the victim's computer.

Impact

Exploitation of this vulnerability allows attackers to read any folder in the personality_folder on the victim's computer, bypassing the intended path sanitization.

Reproduction

To reproduce this vulnerability, send a GET request to the '/list_personalities' endpoint with a 'category' parameter value of './'. The request should include standard headers such as 'User-Agent' and 'Referer'. The response will include a list of personalities, demonstrating unauthorized access to the personality_folder.