CVE-2024-6085: lollms vulnerable to path traversal due to unauthenticated root folder settings change

The vulnerability stems from unauthenticated endpoints that handle critical path configuration changes. While exact function names aren't provided in advisories, the described attack pattern requires: 1) A root folder modification function() that removes path restrictions when set to '/', and 2) An output directory configuration function() that allows writing anywhere. These would typically be found in the XTTS server configuration handlers, which the vulnerability specifically references. The high confidence comes from the direct relationship between the described attack vectors and the required functionality to modify these paths.