CVE-2026-33340

LoLLMs Web UI (lollms-webui), the web interface for Lord of Large Language and Multimodal Systems, contains a critical unauthenticated server-side request forgery (SSRF) flaw in its POST /api/proxy endpoint. An attacker with network access to the interface can send a crafted request that forces the server to issue arbitrary GET requests to attacker-chosen destinations. This enables access to internal-only services, scanning of the host's local network, and exfiltration of sensitive cloud instance metadata such as AWS or GCP IAM credentials. All known existing versions of lollms-webui are affected, and as of publication no patched release is available, so any deployed instance—particularly internet-exposed or cloud-hosted ones—is at risk. No confirmed in-the-wild exploitation is known, but a public security advisory exists and EPSS assigns an elevated 21.6% probability of exploitation within 30 days (97th percentile).

What to do: No patched version is available yet, so mitigate by restricting access to the /api/proxy endpoint (e.g., via reverse-proxy authentication or ACLs) and limiting which instances are internet-exposed; on cloud-hosted deployments, block or restrict access to the instance metadata service (e.g., 169.254.169.254) to prevent IAM credential theft. Review server and cloud logs for unexpected outbound GET requests or metadata-service hits indicating exploitation, and upgrade as soon as a fixed lollms-webui release is published.