Yt Dlp Web Ui
Monthly
Unauthenticated remote attackers can crash yt-dlp-web-ui 4.0.0 and earlier by sending a single JSON-RPC request to the default Service.Formats method, where a crafted url value such as '--version' is passed to the underlying yt-dlp process and produces unexpected output that fails JSON parsing, leading to a NULL pointer dereference and an unrecovered panic that terminates the server process. No credentials, user interaction, or special configuration are required - the only precondition is network reachability of the JSON-RPC interface - and publicly available exploit code exists, so any instance bound to a routable interface or exposed through a reverse proxy is trivially and repeatedly deniable. The impact is confined to availability: there is no data exposure, integrity loss, or code execution.
Unauthenticated information disclosure in yt-dlp-web-ui through 4.0.0 lets remote attackers read server-side files by supplying a dash-prefixed value such as --load-info-json in the url parameter of the Service.Formats JSON-RPC method, causing the underlying yt-dlp process to load an attacker-chosen JSON file whose parsed contents are reflected back in the RPC response. Publicly available exploit code exists, including a published security advisory with reproduction details, though there is no CISA KEV confirmation of active exploitation; the CVSS 4.0 base score is 6.9, while a CVSS 3.1 scoring of the same vector yields 5.3 (Medium) because impact is confined to confidentiality. Any network-reachable instance at or below version 4.0.0 is affected with no authentication, user interaction, or non-default configuration required, so self-hosted instances bound only to localhost or a trusted LAN are materially lower risk than internet-exposed deployments.
Remote command injection in marcopiovanello yt-dlp-web-ui up to v4 lets a remote attacker (CVSS 4.0 vector records PR:N/UI:N, i.e. unauthenticated and no user interaction) abuse the params argument processed by NewGenericDownload in server/internal/downloaders/generic.go to inject arbitrary yt-dlp flags and shell metacharacters into the spawned download command. Publicly available exploit code exists - the flaw was publicly disclosed alongside the CVE, so any network-reachable instance of the generic download feature is a realistic target; there is no indication of confirmed active exploitation (not in CISA KEV). An upstream fix commit (c7ad3bd79c7c520a7d17e7f2ba19d962be8e7897) replaces the previous weak sanitizer with a strict allowlist of yt-dlp flags, but no tagged patched release version is confirmed in the available data, so operators must either track the commit or restrict exposure.
Unauthenticated remote attackers can crash yt-dlp-web-ui 4.0.0 and earlier by sending a single JSON-RPC request to the default Service.Formats method, where a crafted url value such as '--version' is passed to the underlying yt-dlp process and produces unexpected output that fails JSON parsing, leading to a NULL pointer dereference and an unrecovered panic that terminates the server process. No credentials, user interaction, or special configuration are required - the only precondition is network reachability of the JSON-RPC interface - and publicly available exploit code exists, so any instance bound to a routable interface or exposed through a reverse proxy is trivially and repeatedly deniable. The impact is confined to availability: there is no data exposure, integrity loss, or code execution.
Unauthenticated information disclosure in yt-dlp-web-ui through 4.0.0 lets remote attackers read server-side files by supplying a dash-prefixed value such as --load-info-json in the url parameter of the Service.Formats JSON-RPC method, causing the underlying yt-dlp process to load an attacker-chosen JSON file whose parsed contents are reflected back in the RPC response. Publicly available exploit code exists, including a published security advisory with reproduction details, though there is no CISA KEV confirmation of active exploitation; the CVSS 4.0 base score is 6.9, while a CVSS 3.1 scoring of the same vector yields 5.3 (Medium) because impact is confined to confidentiality. Any network-reachable instance at or below version 4.0.0 is affected with no authentication, user interaction, or non-default configuration required, so self-hosted instances bound only to localhost or a trusted LAN are materially lower risk than internet-exposed deployments.
Remote command injection in marcopiovanello yt-dlp-web-ui up to v4 lets a remote attacker (CVSS 4.0 vector records PR:N/UI:N, i.e. unauthenticated and no user interaction) abuse the params argument processed by NewGenericDownload in server/internal/downloaders/generic.go to inject arbitrary yt-dlp flags and shell metacharacters into the spawned download command. Publicly available exploit code exists - the flaw was publicly disclosed alongside the CVE, so any network-reachable instance of the generic download feature is a realistic target; there is no indication of confirmed active exploitation (not in CISA KEV). An upstream fix commit (c7ad3bd79c7c520a7d17e7f2ba19d962be8e7897) replaces the previous weak sanitizer with a strict allowlist of yt-dlp flags, but no tagged patched release version is confirmed in the available data, so operators must either track the commit or restrict exposure.