SEC.co
Emergency

By weakness (CWE)

CWE-641: related vulnerabilities

CVEs classified under CWE-641. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-50023HIGH 8.3

    yt-dlp, a popular command-line tool for downloading audio and video, contains a flaw that allows attackers to plant malicious shortcut files on your system when you download media or subtitles. The vulnerability bypasses a previous security fix by exploiting an allowlist that was meant to preserve legitimate functionality. An attacker could use this to execute code or trick you into running harmful files embedded as .desktop, .url, or .webloc shortcuts.