Vulnerability · Published Oct 30, 2026 · Assigned by VulnCheck

CVE-2026-119979LM Studio before 0.4.22+1 Path Traversal via Model Downloader

High 8.8

In plain English

A high-severity path traversal in LM Studio from Element Labs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.4%top 65.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into downloading a crafted model repository that plants a plugin manifest.json, install-state.json and mcp-bridge-config.json, running an attacker-supplied Python payload on every launch.

Affected products (as reported)

Vendor	Product	Versions
Element Labs	LM Studio	0 – before 0.4.22+1

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

LM Studio 0.4.22 Release Notes release-notes
VulnCheck Advisory: LM Studio before 0.4.22+1 Path Traversal via Model Downloader third-party-advisory