All vulnerabilities
CVE-2026-116073

Leon before commit 50df142 Path Traversal via /download model Command

leon-ai leon
Open in ThreatlineRecord JSON
CVSS
6.9Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in50df142a89a0859e5b7283d87afdab7b01e712a2Fixed versionCVE List
Published25 Oct 2026Updated 25 Oct 2026CVE List

What fixes it

  • 50df142a89a0859e5b7283d87afdab7b01e712a2leonCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to write files outside the models directory via percent-encoded separators. Attackers can trick a user into running '/download model' with a crafted URL containing encoded '../' sequences to write attacker-controlled content to arbitrary paths writable by Leon.

Text from CVE List

Affected versions 1

  • leonaffected: a3afdef81c8dd085b922f5a4e6b68bb9b9d802e4 before 50df142a89a0859e5b7283d87afdab7b01e712a2CVE List

References 6