Skip to content
OpenAdvisories

Vendor

leon-ai

1 known vulnerabilities.

Products

leon 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-116073

    Leon before commit 50df142 Path Traversal via /download model Command

    Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to write files outside the models directory via percent-encoded separators. Attackers can trick a user into running '/download model' with a …

    leon-ai leon