diff --git a/frontend/app.py b/frontend/app.py
index 45700b0..a923fc7 100644
--- a/frontend/app.py
+++ b/frontend/app.py
@@ -132,19 +132,12 @@ async def index(request: Request, vmid: Optional[int] = None, source: Optional[s
 @app.post("/session/upload")
 def session_upload(
     request: Request,
-    vmid: int = Form(...),
-    vm_name: str = Form(""),
     source_url: Optional[str] = Form(None),
     session_id: str = Form(""),
 ):
     """Download a source file via aria2c. Returns JSON with phase + filename."""
     sdir = _staging(session_id) / "in"
     sdir.mkdir(parents=True, exist_ok=True)
-    err = _validate_vmid(vmid)
-    if err:
-        return JSONResponse({"phase": "error", "error": err}, status_code=400)
-
-    vm_name = vm_name.strip()
 
     url = (source_url or "").strip()
     if not url:
@@ -302,16 +295,10 @@ async def session_progress(filename: str):
 @app.post("/session/analyze")
 async def session_analyze(
     request: Request,
-    vmid: int = Form(...),
     filename: str = Form(...),
-    vm_name: str = Form(""),
     session_id: str = Form(""),
 ):
     """Phase 2 — start async backend analysis, return analysis_id for polling."""
-    err = _validate_vmid(vmid)
-    if err:
-        return JSONResponse({"phase": "error", "error": err}, status_code=400)
-
     backend_filename = f"{session_id}/in/{filename}" if session_id else filename
 
     try:
@@ -322,9 +309,7 @@ async def session_analyze(
     return JSONResponse({
         "phase": "analyzing",
         "analysis_id": analysis.get("analysis_id"),
-        "vmid": vmid,
         "filename": filename,
-        "vm_name": vm_name.strip(),
     })