CVE-2026-116073: Leon before commit 50df142 Path Traversal via /download model Command
Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to write files outside the models directory via percent-encoded separators. Attackers can trick a user into running '/download model' with a crafted URL containing encoded '../' sequences to write attacker-controlled content to arbitrary paths writable by Leon.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
The attacker must persuade a user to run the '/download model' command with a crafted URL. The URL must contain percent-encoded '../' path-separator sequences so that attacker-controlled content is written outside Leon's models directory.
Which systems or users are exposed?
Users of Leon versions before commit 50df142 are exposed if they can be induced to execute the '/download model' command using an attacker-supplied URL. The impact is limited to paths writable by the Leon process.
Is exploitation possible without user interaction or authentication?
The reported attack vector is network-based and requires no attacker privileges, but it requires user interaction. A user must run the crafted '/download model' command.
How can I tell whether my deployment may be affected?
Check whether the Leon code includes commit 50df142. Deployments before that commit may be affected, particularly if users can run '/download model' with URLs supplied by untrusted parties.