lm_studio vulnerabilities

CVEs whose affected-version data names the lm_studio package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119979High· 8.8

1w ago

LM Studio before 0.4.22+1 Path Traversal via Model Downloader

LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers…

▾ TwilightElement Labs · LM StudioEPSS 0.40%via CVEORG