CVE-2026-50234CWE-22

Lyrion Music Server 9.2.0 Path Traversal File Read

High · published June 5, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory structure.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00928 · 60.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-06-05T13:24Z
EPSS history
Timeline
  • 05 JUN 13:24Z
    Lyrion Music Server 9.2.0 Path Traversal File Read
    cvelistv5