nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-50234 CVE-2026-50234
HIGH
Lyrion Music Server 9.2.0 Path Traversal File Read
Record summary
CVE-2026-50234 has a selected CVSS score of 8.7 (high).
Description
Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory structure.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 8, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Lyrion Music ServerBrowse LMS Community / Lyrion Music Server | CVE List | 9.2.0 | affected |
References
3VulnCheck Advisory: Lyrion Music Server 9.2.0 Path Traversal File ReadThird-party advisory
https://www.vulncheck.com/advisories/lyrion-music-server-path-traversal-file-read Zero Science Lab DisclosureThird-party advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5992.php