Yes, news made the rounds several weeks ago. It was a potential exploit, and it looks like it was caught in time, and only affected Limewire versions 3.9.6 through 4.8.0.

The hole was patched within hours of LW being notified, users got the upgrade notice, and the value of open-source development and scrutiny paid off well.

Looks like the LW crew handled this promptly and professionally.