SZB-a6f0228424
EUVD-2026-114249 reports path traversal in LM Studio model downloader (CVSS 8.7)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Element Labs
- Product
- LM Studio
- First seen
Summary
The EUVD listing says LM Studio before 0.4.22+1 has a path traversal flaw in the model downloader's resolveDownloadRequest that allows writes outside the models directory using backslash-separated filenames. The item is a feed post, and its text is truncated before it describes the full attack conditions.
If you use Element Labs
Update LM Studio to version 0.4.22+1 or later
Download models only from sources you trust
Check the models directory for unexpected files written outside it
What the sources say 1
· Mastodon: “LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames.” Source