PatchTheCVElite xl vulnerabilities and fixes
Recent CVEs affecting lite xl, with upgrade or downgrade steps. 2 tracked.
Also searched as: litexl.
lite xl has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-11-20. Highest priority: CVE-2025-12121 (score 38/100).
- CVE-2025-12121 HIGH 7.3 UPGRADE Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary
- CVE-2025-12120 HIGH 7.3 UPGRADE Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project direc
FAQ
How do I fix lite xl vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lite xl being exploited right now?
None of the tracked lite xl CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lite xl CVE should I patch first?
CVE-2025-12121 currently ranks highest (38/100): Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary .