What is CVE-2026-50234?

CVE-2026-50234 is a high-severity vulnerability, classified under Path Traversal. CVSS score: 7.5/10. Published 2026-06-05.

How severe is CVE-2026-50234?

High severity. CVSS v3 base score is 7.5 out of 10.

CVE-2026-50234

CVE-2026-50234

Lyrion Music Server 9.2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting directory traversal in the web server context. Attackers can manipulate file path parameters to access sensitive files outside the intended directory structure.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.006 (48.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Weakness classification (CWE)

CWE-22 — Path Traversal

References

disclosure@vulncheck.com (third-party-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-50234?: CVE-2026-50234 is a high-severity vulnerability, classified under Path Traversal. CVSS score: 7.5/10. Published 2026-06-05.
How severe is CVE-2026-50234?: High severity. CVSS v3 base score is 7.5 out of 10.