LM Studio model downloader path traversal lets a crafted model run code on every launch (CVE-2026-119979), fixed in 0.4.22+1 ยท updates https://pwn.watch/i/lm-studio-model-downloader-path-traversal-cve-2026-119979 LM Studio, the desktop app for running large language models locally, has a path traversal flaw in its model downloader (CVE-2026-119979, CVSS 4.0 8.7 high). Before 0.4.22+1, resolveDownloadRequest accepted backslash-separated traversal filenames, so a crafted model repository could write files outside the models directory. VulnCheck says an attacker who tricks a user into downloading such a model can plant a plugin manifest.json, install-state.json and mcp-bridge-config.json that run an attacker-supplied Python payload every time LM Studio launches. The bug was credited to Ariel Fogel of Pillar Security and is fixed in LM Studio 0.4.22+1. en Fri, 30 Oct 2026 00:00:00 GMT LM Studio model downloader path traversal lets a crafted model run code on every launch (CVE-2026-119979), fixed in 0.4.22+1: VulnCheck publishes CVE-2026-119979 (CVSS 4.0 8.7 high): path traversal in LM Studio's model downloader before 0.4.22+1 lets a crafted model repository plant plugin files that run attacker Python code on every launch. Credit: Ariel Fogel of Pillar Security. https://pwn.watch/i/lm-studio-model-downloader-path-traversal-cve-2026-119979 https://pwn.watch/i/lm-studio-model-downloader-path-traversal-cve-2026-119979#2026-10-30-0543fd69 Fri, 30 Oct 2026 00:00:00 GMT high <p><a href="https://www.vulncheck.com/advisories/lm-studio-before-0.4.22-1-path-traversal-via-model-downloader">Source</a></p>