CVE-2026-119979
High
Description
LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into downloading a crafted model repository that plants a plugin manifest.json, install-state.json and mcp-bridge-config.json, running an attacker-supplied Python payload on every launch.
SeverityHigh
CVSS8.8
Exploit probability—
ProductLM Studio
PublishedOct 30, 2026
First seenNov 4, 2026
Weakness typeCWE-22Path traversal
How to fix
Update
- Element Labs LM Studio0.4.22+1 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Element Labs LM Studio | v < 0.4.22+1 | 0.4.22+1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.