leon-ai

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

leon-ai records in CISA KEV

No leon-ai vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-80153 CVE-2026-116073 · GHSA-5jhh-46x7-49hp

Leon Path Traversal via /download model Command

LOW 30

Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to write files outside the models directory via percent-encoded separators.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00325 Published 2026-10-25 Fixed CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0