Remote code execution via traversed binding path

Path traversal in LoLLMs WebUI allows remote authenticated users to execute arbitrary code through the binding reinstall endpoint. The reinstall_binding handler in lollms_binding_infos.py inadequately sanitizes binding_path, allowing traversal to an attacker-controlled directory whose uploaded init.py is loaded as a binding. Exploitation requires low privileges and user interaction; successful execution runs attacker-supplied Python code on the server.