yutu vulnerabilities

1 known vulnerability in yutu from Eat-pray-ai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  yutu: External Control of File Name or Path

  CVE-2026-50158Sep 17, 2026Eat-pray-ai

  yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parameter through cmd/caption/download.go and passes it to Caption.Download() in pkg/caption/caption.go, wh