CyberSecBulletin

Eat-pray-ai vulnerabilities

We track 1 vulnerability in Eat-pray-ai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.

1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score

Latest Eat-pray-ai vulnerabilities

  • 7.7 High severity

    yutu: External Control of File Name or Path

    CVE-2026-50158Eat-pray-ai

    yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parameter through cmd/caption/download.go and passes it to Caption.Download() in pkg/caption/caption.go, wh