Search: CVE-2026-50023

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.7%	CVE-2026-50023yt-dlp · Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519) High8.3EPSS 0.7%2026-08-13GCVE DatabaseCVE-2026-50023 yt-dlp versions prior to 2026.7.4 contain a vulnerability that allows remote attackers to write arbitrary OS-shortcut files (.desktop, .url, .webloc) to the user's filesystem. This occurs due to insufficient filename sanitization and an unsafe allowlist for the --write-link option, bypassing the previous fix for CVE-2024-38519. The issue is fixed in version 2026.7.4. EPSS 0.7%Vulnerability #brew-yt-dlp-cve-2026-50023 #homebrew	GCVE Database	2026-08-13

Page 1 of 1 · 2 duplicate CVE records merged