CVE-2025-12121 | Lite XL up to 2.1.8 core.lua system.exec os command injection

A vulnerability classified as critical has been found in Lite XL up to 2.1.8. Impacted is the function system.exec of the file core.lua. The manipulation leads to os command injection.

This vulnerability is documented as CVE-2025-12121. The attack can be initiated remotely. There is not any exploit available.

To fix this issue, it is recommended to deploy a patch.