Is CVE-2026-12228 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-12228 being exploited in the wild.

How severe is CVE-2026-12228?

High severity, with a CVSS score of 8.7, published 18 July 2026.

Is there a fix for CVE-2026-12228?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-12228 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-12228?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-12228: Parisneo LoLLMs stored XSS in prompt sharing endpoint

CVE-2026-12228 · Severity: high · CVSS 8.7 · Published 2026-07-18

A security vulnerability exists in LoLLMs, an open-source platform for large language models, specifically within its direct messaging and prompt-sharing features. An attacker can send a specially crafted message that, when opened by another user, executes malicious code in their web browser. This could allow the attacker to steal sensitive data, perform actions as the victim, or take over the victim's account.

Quick answers

Is CVE-2026-12228 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-12228 being exploited in the wild.
How severe is CVE-2026-12228?: High severity, with a CVSS score of 8.7, published 18 July 2026.
Which products and versions are affected?: parisneo lollms latest.
Is there a fix for CVE-2026-12228?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-12228 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-12228?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint of parisneo/lollms. The application fails to perform server-side sanitization of the `prompt_content` field before storing it in the database. On the client side, the `MessageContentRenderer` component uses Vue's `v-html` directive to render these messages, relying on a regex-based sanitizer that is insufficient to block malicious HTML payloads. An authenticated attacker can exploit this by sending a malicious prompt-share message to a victim; when the victim views the message, the payload executes. This can lead to session hijacking, unauthorized API calls on behalf of the victim, and full account takeover.

Affected products

parisneo lollms latest

Timeline

2026-07-18: disclosed
2026-07-18: advisory

References

https://huntr.com/bounties/25623635-5ceb-4062-8289-02089e6d97c1

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.