Lm Studio
Monthly
Path traversal in LM Studio's model downloader before 0.4.22+1 allows a crafted model repository to write startup-loaded configuration files outside the models directory, resulting in execution of an attacker-supplied Python payload on every launch. Exploitation is not autonomous: the victim must be tricked into downloading the malicious repository, so the CVSS 4.0 score of 8.7 reflects high confidentiality, integrity, and availability impact gated by user interaction. Vendor-released patch: 0.4.22+1; no public exploit identified at time of analysis.
Path traversal in LM Studio's model downloader before 0.4.22+1 allows a crafted model repository to write startup-loaded configuration files outside the models directory, resulting in execution of an attacker-supplied Python payload on every launch. Exploitation is not autonomous: the victim must be tricked into downloading the malicious repository, so the CVSS 4.0 score of 8.7 reflects high confidentiality, integrity, and availability impact gated by user interaction. Vendor-released patch: 0.4.22+1; no public exploit identified at time of analysis.