A vulnerability was found in parisneo lollms up to 2.1.x. It has been classified as critical. Affected is an unknown function of the component JSON Web Token Handler. This manipulation causes improper access controls.
This vulnerability is tracked as CVE-2026-1114. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is recommended.
