Critical LoLLMs WEBUI Flaws Expose Servers to SSRF and Friend Request IDOR

LoLLMs WEBUI was found to contain two high-severity vulnerabilities affecting core web application functionality. The most severe issue, tracked as CVE-2026-33340, is an unauthenticated server-side request forgery (SSRF) in the POST /api/proxy endpoint that affects all known existing versions. An attacker can abuse the endpoint to force the server to make arbitrary GET requests, potentially reaching internal services, scanning local networks, and retrieving sensitive cloud metadata, including possible AWS or GCP IAM tokens. The flaw is mapped to CWE-306 and CWE-918, with a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, and no patched version was known at publication.

A second critical flaw, CVE-2026-0562, affects parisneo/lollms through an insecure direct object reference (IDOR) in friend request handling. In versions up to 2.2.0, the respond_request() function in backend/routers/friends.py failed to verify that the authenticated user was part of the targeted friendship, allowing any logged-in user to accept or reject another user's friend requests via /api/friends/requests/{friendship_id}. The weakness, mapped to CWE-863, could enable unauthorized actions, privacy violations, and social engineering abuse; unlike the SSRF issue, this bug includes references to a fixing commit and a Huntr report.