Read the docs

Lite XL

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Lite XL records in CISA KEV

No Lite XL vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lite Xl 2 records LOW

Records

2 records

TI-2025-11116 CVE-2025-12121 · GHSA-w994-qmmq-w97w

OS command injection in Lite XL

Priority LOW 34

Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through unsanitized shell command construction.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00375 Published 2025-11-20 No fix listed CWE-78
TI-2025-11115 CVE-2025-12120 · GHSA-63qf-frrc-rvqp

Code injection in Lite XL

Priority LOW 34

Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project directory, without prompting the user for confirmation.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0033 Published 2025-11-20 No fix listed CWE-94
Open these records in search →