---
id: CVE-2024-6982
aliases:
  - GHSA-jccx-m9v4-9hwh
  - PYSEC-2026-1591
title: LoLLMS Code Injection vulnerability
summary: LoLLMS Code Injection vulnerability
severity: high
cvss: 8.4
cvssVector: 'CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: lollms
product: lollms
ecosystem: pip
affected:
  - lollms < 11.0.0
patched:
  - lollms 11.0.0
published: '2025-03-20'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-jccx-m9v4-9hwh'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-6982'
  - url: >-
      https://github.com/parisneo/lollms/commit/30e7eaba2ccfb751a81e7cb29fdef2ae8ffa6832
  - url: 'https://github.com/ParisNeo/lollms'
  - url: 'https://huntr.com/bounties/4f8e73ac-aaaf-4d5c-a6dd-58215b5a7fea'
tags:
  - osv
  - pip
epss: 0.0046
epssPercentile: 0.39199
ingestedAt: '2026-07-08T18:25:50.643Z'
---

## Overview

A remote code execution vulnerability exists in the Calculate function of parisneo/lollms version 9.8. The vulnerability arises from the use of Python's `eval()` function to evaluate mathematical expressions within a Python sandbox that disables `__builtins__` and only allows functions from the `math` module. This sandbox can be bypassed by loading the `os` module using the `_frozen_importlib.BuiltinImporter` class, allowing an attacker to execute arbitrary commands on the server. The issue is fixed in version 9.10.

## Affected packages

- `lollms < 11.0.0`

## Remediation

Upgrade to a patched release:

- `lollms 11.0.0`