PT-2026-46953 · Lms Community · Lyrion Music Server

Published 2026-06-05 · Updated 2026-06-05 · CVE-2026-50234

Mitre

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory structure.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-50234

Affected Products

Lyrion Music Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-50234 · Security Note
• https://zeroscience.mk/en/vulnerabilities/ZSL-2026-5992.php · Note
• https://vulncheck.com/advisories/lyrion-music-server-path-traversal-file-read · Note