Skip to content
OpenAdvisories

Vendor

Element Labs

1 known vulnerabilities.

Products

LM Studio 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-119979

    LM Studio before 0.4.22+1 Path Traversal via Model Downloader

    LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into …

    Element Labs LM Studio