TI-2026-83265 CVE-2026-119979 · GHSA-fv7x-c662-7ccq
Path traversal in LM Studio model downloader lets attackers write files
Priority MEDIUM 46
LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal fil…