The vulnerability CVE-2026-0560 affects parisneo/lollms before version 2.2.0. The issue is a Server-Side Request Forgery (SSRF) in the /api/files/export-content endpoint due to insufficient validation of user-controlled URLs in the _download_image_to_temp() function within backend/routers/files.py. Exploiting this flaw enables attackers to send arbitrary HTTP requests from the server to internal services or cloud metadata endpoints. This can result in unauthorized access to internal network resources, cloud metadata information, port scanning, and potentially remote code execution. The CVSS 3.0 base score is 7.5, indicating a high severity vulnerability. No patch or vendor advisory confirming remediation is currently available.

Successful exploitation of this SSRF vulnerability can allow attackers to access internal network services and cloud metadata endpoints that are otherwise inaccessible externally. This can lead to information disclosure, internal network reconnaissance, and possibly remote code execution depending on the internal services exposed. The vulnerability does not require authentication or user interaction, increasing its risk. However, no known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the vulnerable endpoint or implementing network-level controls to limit outbound HTTP requests from the application server. Monitoring and filtering user input to the /api/files/export-content endpoint may reduce risk but is not a guaranteed mitigation.