CVE ID :CVE-2026-119979 Published : Oct. 30, 2026, 5:48 p.m. | 12 minutes ago Description :LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using...

#Sicherheitslücke #Malware

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-119979 - LM Studio before 0.4.22+1 Path Traversal via Model Downloader

VERWANDTEARTIKEL

CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

CVE-2026-118697 - JetBrains Toolbox and IntelliJ IDEA Improper Certificate Validation Vulnerability

CVE-2026-118696 - JetBrains IDEs Embedded Browser Certificate Validation Vulnerability

CVE-2026-119978 - Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore

CVE-2026-61804 - myTinyWMS has Stored Cross-Site Scripting (XSS) in Product and Category Management

CVE-2026-61826 - Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery