OpenLLM Local File Inclusion Vulnerability

A Local File Inclusion (LFI) vulnerability exists in OpenLLM version 0.6.10, allowing attackers to include files from the local server via the web application. This vulnerability could reveal internal server files and sensitive information, such as configuration files, passwords, and other critical data. Unauthorized access to such files could lead to a complete compromise of the system's security, enabling attackers to further infiltrate the network, exfiltrate data, or escalate privileges.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical server files, including configuration files, user credentials, and private keys, potentially leading to a complete compromise of the system's security.