CVE-2026-33340 — AI Deep Analysis Summary

🚨 **Essence**: SSRF via `/api/proxy`. 📉 **Consequences**: Attackers force the server to make arbitrary GET requests. This leads to internal service access, local network scanning, and sensitive cloud metadata leakage.…

🛡️ **CWE-306**: Missing Authentication for Critical Function. 🐛 **Flaw**: The `/api/proxy` endpoint lacks access controls.…

🏢 **Vendor**: ParisNeo. 📦 **Product**: LoLLMs WEBUI (lollms-webui). 👤 **Developer**: Saifeddine ALOUI. ⚠️ **Affected**: Any instance running the vulnerable version of this multi-model LLM web interface.…

🕵️ **Privileges**: Unauthenticated access. 📂 **Data**: Internal network data, cloud metadata (e.g., AWS/Azure secrets), and local service responses.…

📉 **Threshold**: LOW. 🔑 **Auth**: None required. 🖱️ **UI**: Not required. 🚀 **Ease**: Any anonymous user on the network can exploit this. It is a 'Zero-Click' style auth bypass for the proxy function.…

📜 **Public PoC**: Yes. 🧪 **Source**: Nuclei templates available on GitHub (projectdiscovery). 🌍 **Status**: Known exploit pattern exists. 🛠️ Security researchers have already mapped the attack vector.…

🔍 **Check**: Scan for `/api/proxy` endpoint. 📡 **Tool**: Use Nuclei with the CVE-2026-33340 template. 🧪 **Test**: Send a GET request to the proxy pointing to `http://169.254.169.254` (cloud metadata).…

🛡️ **Official Fix**: Yes. 📝 **Advisory**: GHSA-mcwr-5469-pxj4 published. 🔗 **Source**: GitHub Security Advisories for ParisNeo/lollms-webui. 🔄 **Action**: Update to the patched version immediately.…

🚧 **Workaround**: Block external access to `/api/proxy`. 🛑 **Firewall**: Restrict inbound traffic to the LoLLMs WEBUI interface. 🚫 **WAF**: Add rules to deny requests containing proxy parameters.…

🔥 **Priority**: CRITICAL. 🚨 **Urgency**: High. 📉 **CVSS**: High severity (C:H, I:H). ⚡ **Risk**: Unauthenticated SSRF is a top-tier threat. 🏃 **Action**: Patch NOW. Do not wait.…