LMS Community vulnerabilities
We track 3 vulnerabilities in LMS Community products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 5, 2026.
Latest LMS Community vulnerabilities
- 7.5 High severity
Lyrion Music Server: Improper Limitation of a Pathname to a Restricted Directory
Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files
- 7.2 High severity
Lyrion Music Server: Improper Neutralization of Input During Web Page Generation
Lyrion Music Server 9.2.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through media file metadata tags like GENRE, ARTIST, and ALBUM. Attackers can craft files with XSS payloads in metadata tags that e
- 7.2 High severity
Lyrion Music Server: Improper Neutralization of Input During Web Page Generation
Lyrion Music Server 9.2.0 contains an unauthenticated stored cross-site scripting vulnerability in the log viewer that allows attackers to inject malicious scripts by exploiting unescaped template variables. Attackers can inject XSS payloads through search, li