CVE-2024-6394: Local File Inclusion vulnerability in lollms-webui before v9.8. This security flaw allows attackers to access sensitive server files by exploiting unverified path concatenation within the serve_js function. The path traversal attack can expose critical data like SSH keys and configuration files. With an SVRS of 30, while not critical, this vulnerability warrants attention to prevent potential data breaches. Exploiting this flaw can grant unauthorized access to arbitrary files. Organizations using affected versions should update immediately to mitigate the risk of sensitive data exposure and system compromise.