Lite-xl Lite Xl — known CVE vulnerabilities

Every CVE whose affected-product data names Lite-xl Lite Xl, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-12120 — CVSS 7.3 (high): Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project directory, without prompting the…
• CVE-2025-12121 — CVSS 7.3 (high): Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through…