StreamVault vulnerabilities

2 known vulnerabilities in StreamVault from Lemon8866. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  StreamVault: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-66203Dec 27, 2025Lemon8866

  StreamVault is a video download integration solution. Prior to version 251126, a Remote Code Execution (RCE) vulnerability exists in the stream-vault application (SpiritApplication). The application allows administrators to configure yt-dlp arguments via the /

• 8.7 High severity

  StreamVault: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-57799Sep 1, 2025Lemon8866EPSS 1.23%

  StreamVault is a multi-platform video parsing and downloading tool. Prior to version 250822, after logging into the StreamVault-system, an attacker can modify certain system parameters, construct malicious commands, execute command injection attacks against th