A critical Server-Side Request Forgery vulnerability in ParisNeo lollms allows unauthenticated attackers to interact with internal network resources and cloud metadata services.

The application is susceptible to a Server-Side Request Forgery (CWE-918) within the /api/files/export-content endpoint. The _download_image_to_temp() function fails to validate user-controlled input, allowing an unauthenticated attacker to force the server to perform arbitrary HTTP requests.

This vulnerability carries a CVSS score of 7.5, indicating a high severity risk. Successful exploitation allows an attacker to bypass network perimeters to access internal services, exfiltrate sensitive cloud metadata, perform port scanning, or potentially achieve remote code execution. Such access can lead to significant data breaches, unauthorized internal reconnaissance, and complete compromise of the underlying host environment.

Immediate Action: Update the ParisNeo lollms application to version 2.2.0 or later to ensure the input validation flaw is corrected.

Proactive Monitoring: Review web server and application logs for unusual requests to the /api/files/export-content endpoint, specifically looking for attempts to reach internal IP addresses (e.g., 169.254.169.254) or local network segments.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block or sanitize suspicious requests targeting the vulnerable API endpoint, particularly those containing internal network destinations.

Public Exploit Available: Yes, a public proof-of-concept repository is available on GitHub.

Given the availability of a public proof-of-concept and the high potential for internal network compromise, this issue poses a significant risk to organizations running lollms. Administrators should prioritize upgrading to version 2.2.0 immediately to eliminate this attack vector. Until the patch is applied, restricting network access to the host running the application is strongly advised.