Search: CVE-2026-50574

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.5%	CVE-2026-50574yt-dlp · Arbitrary code execution via manifest downloads with aria2c High8.3EPSS 0.5%2026-08-13GCVE DatabaseCVE-2026-50574 yt-dlp versions prior to 2026.7.4 contain a vulnerability when using aria2c as an external downloader for fragmented manifest formats like HLS or DASH. Insufficient input sanitization allows an attacker to perform arbitrary file writes, leading to immediate arbitrary code execution on Windows and code execution on subsequent runs on non-Windows platforms. This vulnerability is fixed in version 2026.7.4. EPSS 0.5%Vulnerability #brew-yt-dlp-cve-2026-50574 #homebrew	GCVE Database	2026-08-13

Page 1 of 1 · 2 duplicate CVE records merged