-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| lollms | pip | = 9.6 |
Miggo AIRoot Cause AnalysisThe provided information indicates the vulnerability exists in the 'list_personalities' endpoint within 'endpoints/lollms_advanced.py', but the actual code for this endpoint is not included in the commit diff or other provided data. The commit diff shows changes to 'summon_personality.py', which relates to message handling but does not directly address the path traversal vulnerability. Without explicit visibility into the implementation of the 'list_personalities' endpoint (e.g., how the 'category' parameter is processed and sanitized), it is not possible to identify the specific vulnerable function with high confidence. The patch referenced in the advisory does not directly resolve the path traversal issue, further complicating the mapping to a specific function.