PatchTheCVElite-xl vulnerabilities
Recent CVEs affecting lite-xl products. 2 tracked.
lite-xl has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-11-20. Highest priority: CVE-2025-12121 (score 38/100).
- CVE-2025-12121 HIGH 7.3 UPGRADE Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary
- CVE-2025-12120 HIGH 7.3 UPGRADE Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project direc
FAQ
How do I fix lite-xl vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lite-xl being exploited right now?
None of the tracked lite-xl CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lite-xl CVE should I patch first?
CVE-2025-12121 currently ranks highest (38/100): Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary .