8.8Hoch
LM Studio before 0.4.22+1 Path Traversal via Model Downloader
Element Labs LM Studio
LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into …