CVE-2026-116073Published

Leon before commit 50df142 Path Traversal via /download model Command

Exact source revision recorded 25 Oct 2026 13:17:04 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-116073

Published

leon

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "leon-ai",
                    "product": "leon",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "a3afdef81c8dd085b922f5a4e6b68bb9b9d802e4",
                            "status": "affected",
                            "versionType": "git",
                            "lessThan": "50df142a89a0859e5b7283d87afdab7b01e712a2"
                        }
                    ]
                }