---
id: CVE-2026-119979
title: LM Studio before 0.4.22+1 Path Traversal via Model Downloader
summary: >-
  LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model
  downloader's resolveDownloadRequest that allows attackers to write files
  outside the models directory using backslash-separated traversal filenames.
  Attackers…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-22
vendor: Element Labs
product: LM Studio
affected:
  - lm_studio < 0.4.22+1
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-30T18:28:34.449959Z'
published: '2026-10-30'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T18:34:20.363Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-119979'
references:
  - url: 'https://lmstudio.ai/changelog/lmstudio-v0.4.22'
    label: LM Studio 0.4.22 Release Notes
  - url: >-
      https://www.vulncheck.com/advisories/lm-studio-before-0.4.22-1-path-traversal-via-model-downloader
    label: >-
      VulnCheck Advisory: LM Studio before 0.4.22+1 Path Traversal via Model
      Downloader
tags:
  - cve.org
epss: 0.00397
epssPercentile: 0.3419
ingestedAt: '2026-11-05T16:24:31.327Z'
---

## Overview

LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into downloading a crafted model repository that plants a plugin manifest.json, install-state.json and mcp-bridge-config.json, running an attacker-supplied Python payload on every launch.

## Affected

- `lm_studio < 0.4.22+1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.