Executive Summary

CVE-2026-50234 is a path traversal vulnerability found in Lyrion Music Server version 9.2.0. It allows unauthenticated attackers to read arbitrary files on the server by exploiting directory traversal in the web server context.

Attackers manipulate file path parameters to access files outside the intended directory structure, potentially exposing sensitive information.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have a significant impact as it allows attackers to read sensitive files without authentication.

• Exposure of confidential or sensitive data stored on the server.
• Potential leakage of configuration files, credentials, or other critical information.
• Increased risk of further attacks leveraging the disclosed information.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows unauthenticated attackers to read arbitrary files, including potentially sensitive files, by exploiting directory traversal in the web server context.

This unauthorized access to sensitive files could lead to exposure of personal or protected data, which may result in non-compliance with data protection regulations such as GDPR or HIPAA.

Organizations using Lyrion Music Server 9.2.0 or earlier should consider this risk as it may violate requirements for protecting sensitive information and ensuring confidentiality under these standards.

Useful 0 Not Useful 0