Skip to content
OpenAdvisories

Vendor

Lite XL

2 known vulnerabilities.

Products

Lite XL 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2025-12121

    CVE-2025-12121

    Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through unsanitized shell command construction. This function was used in project directory launching (core.lua), drag-and-drop fil…

    Lite XL Lite XL lite-xl Alpine
  • High 7.3
    CVE-2025-12120

    CVE-2025-12120

    Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project directory, without prompting the user for confirmation. The .lite_project.lua file is intended for project-specific configuration but can contain executab…

    Lite XL Lite XL