CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-55404

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .desktop shortcut files using attacker-controlled webpage_url or filename metadata without sufficient validation or escaping, allowing malicious file:// URI injection on Windows or newline-based desktop entry key injection on Linux that can execute commands if the generated shortcut is opened. This issue is fixed in version 2026.7.4.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 42.4%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2026-55404

Yt-Dlp Project » Yt-Dlp » Version: N/A

cpe:2.3:a:yt-dlp_project:yt-dlp:-
Yt-Dlp Project » Yt-Dlp » Version: 2021.01.07

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.01.07
Yt-Dlp Project » Yt-Dlp » Version: 2021.01.08

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.01.08
Yt-Dlp Project » Yt-Dlp » Version: 2021.01.09

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.01.09
Yt-Dlp Project » Yt-Dlp » Version: 2021.01.10

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.01.10
Yt-Dlp Project » Yt-Dlp » Version: 2021.01.12

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.01.12
Yt-Dlp Project » Yt-Dlp » Version: 2021.01.14

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.01.14
Yt-Dlp Project » Yt-Dlp » Version: 2021.01.16

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.01.16
Yt-Dlp Project » Yt-Dlp » Version: 2021.01.20

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.01.20
Yt-Dlp Project » Yt-Dlp » Version: 2021.01.24

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.01.24
Yt-Dlp Project » Yt-Dlp » Version: 2021.01.29

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.01.29
Yt-Dlp Project » Yt-Dlp » Version: 2021.02.04

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.02.04
Yt-Dlp Project » Yt-Dlp » Version: 2021.02.09

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.02.09
Yt-Dlp Project » Yt-Dlp » Version: 2021.02.15

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.02.15
Yt-Dlp Project » Yt-Dlp » Version: 2021.02.19

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.02.19
Yt-Dlp Project » Yt-Dlp » Version: 2021.02.24

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.02.24
Yt-Dlp Project » Yt-Dlp » Version: 2021.03.01

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.03.01
Yt-Dlp Project » Yt-Dlp » Version: 2021.03.03

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.03.03
Yt-Dlp Project » Yt-Dlp » Version: 2021.03.03.2

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.03.03.2
Yt-Dlp Project » Yt-Dlp » Version: 2021.03.07

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.03.07
Yt-Dlp Project » Yt-Dlp » Version: 2021.03.15

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.03.15
Yt-Dlp Project » Yt-Dlp » Version: 2021.03.21

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.03.21
Yt-Dlp Project » Yt-Dlp » Version: 2021.03.24

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.03.24
Yt-Dlp Project » Yt-Dlp » Version: 2021.03.24.1

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.03.24.1
Yt-Dlp Project » Yt-Dlp » Version: 2021.04.03

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.04.03
Yt-Dlp Project » Yt-Dlp » Version: 2021.04.11

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.04.11
Yt-Dlp Project » Yt-Dlp » Version: 2021.04.22

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.04.22
Yt-Dlp Project » Yt-Dlp » Version: 2021.05.11

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.05.11
Yt-Dlp Project » Yt-Dlp » Version: 2021.05.20

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.05.20
Yt-Dlp Project » Yt-Dlp » Version: 2021.06.01

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.06.01
Yt-Dlp Project » Yt-Dlp » Version: 2021.06.08

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.06.08
Yt-Dlp Project » Yt-Dlp » Version: 2021.06.09

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.06.09
Yt-Dlp Project » Yt-Dlp » Version: 2021.06.23

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.06.23
Yt-Dlp Project » Yt-Dlp » Version: 2021.07.07

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.07.07
Yt-Dlp Project » Yt-Dlp » Version: 2021.07.21

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.07.21
Yt-Dlp Project » Yt-Dlp » Version: 2021.07.24

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.07.24
Yt-Dlp Project » Yt-Dlp » Version: 2021.08.02

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.08.02
Yt-Dlp Project » Yt-Dlp » Version: 2021.08.10

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.08.10
Yt-Dlp Project » Yt-Dlp » Version: 2021.09.01

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.09.01
Yt-Dlp Project » Yt-Dlp » Version: 2021.09.02

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.09.02
Yt-Dlp Project » Yt-Dlp » Version: 2021.09.25

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.09.25
Yt-Dlp Project » Yt-Dlp » Version: 2021.10.09

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.10.09
Yt-Dlp Project » Yt-Dlp » Version: 2021.10.10

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.10.10
Yt-Dlp Project » Yt-Dlp » Version: 2021.10.22

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.10.22
Yt-Dlp Project » Yt-Dlp » Version: 2021.11.10

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.11.10
Yt-Dlp Project » Yt-Dlp » Version: 2021.11.10.1

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.11.10.1
Yt-Dlp Project » Yt-Dlp » Version: 2021.12.01

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.12.01
Yt-Dlp Project » Yt-Dlp » Version: 2021.12.25

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.12.25
Yt-Dlp Project » Yt-Dlp » Version: 2021.12.27

cpe:2.3:a:yt-dlp_project:yt-dlp:2021.12.27
Yt-Dlp Project » Yt-Dlp » Version: 2022.01.21

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.01.21
Yt-Dlp Project » Yt-Dlp » Version: 2022.02.03

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.02.03
Yt-Dlp Project » Yt-Dlp » Version: 2022.02.04

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.02.04
Yt-Dlp Project » Yt-Dlp » Version: 2022.03.08

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.03.08
Yt-Dlp Project » Yt-Dlp » Version: 2022.03.08.1

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.03.08.1
Yt-Dlp Project » Yt-Dlp » Version: 2022.04.08

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.04.08
Yt-Dlp Project » Yt-Dlp » Version: 2022.05.18

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.05.18
Yt-Dlp Project » Yt-Dlp » Version: 2022.06.22

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.06.22
Yt-Dlp Project » Yt-Dlp » Version: 2022.06.22.1

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.06.22.1
Yt-Dlp Project » Yt-Dlp » Version: 2022.06.29

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.06.29
Yt-Dlp Project » Yt-Dlp » Version: 2022.07.18

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.07.18
Yt-Dlp Project » Yt-Dlp » Version: 2022.08.08

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.08.08
Yt-Dlp Project » Yt-Dlp » Version: 2022.08.14

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.08.14
Yt-Dlp Project » Yt-Dlp » Version: 2022.08.18.36

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.08.18.36
Yt-Dlp Project » Yt-Dlp » Version: 2022.08.19

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.08.19
Yt-Dlp Project » Yt-Dlp » Version: 2022.09.01

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.09.01
Yt-Dlp Project » Yt-Dlp » Version: 2022.10.04

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.10.04
Yt-Dlp Project » Yt-Dlp » Version: 2022.11.11

cpe:2.3:a:yt-dlp_project:yt-dlp:2022.11.11
Yt-Dlp Project » Yt-Dlp » Version: 2023.01.02

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.01.02
Yt-Dlp Project » Yt-Dlp » Version: 2023.01.06

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.01.06
Yt-Dlp Project » Yt-Dlp » Version: 2023.02.17

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.02.17
Yt-Dlp Project » Yt-Dlp » Version: 2023.03.03

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.03.03
Yt-Dlp Project » Yt-Dlp » Version: 2023.03.04

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.03.04
Yt-Dlp Project » Yt-Dlp » Version: 2023.06.21

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.06.21
Yt-Dlp Project » Yt-Dlp » Version: 2023.06.22

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.06.22
Yt-Dlp Project » Yt-Dlp » Version: 2023.07.06

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.07.06
Yt-Dlp Project » Yt-Dlp » Version: 2023.09.24

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.09.24
Yt-Dlp Project » Yt-Dlp » Version: 2023.10.07

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.10.07
Yt-Dlp Project » Yt-Dlp » Version: 2023.10.13

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.10.13
Yt-Dlp Project » Yt-Dlp » Version: 2023.11.14

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.11.14
Yt-Dlp Project » Yt-Dlp » Version: 2023.11.16

cpe:2.3:a:yt-dlp_project:yt-dlp:2023.11.16
Yt-Dlp Project » Yt-Dlp » Version: 2024.04.09

cpe:2.3:a:yt-dlp_project:yt-dlp:2024.04.09
Yt-Dlp Project » Yt-Dlp » Version: 2025.07.21

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.07.21
Yt-Dlp Project » Yt-Dlp » Version: 2025.08.11

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.08.11
Yt-Dlp Project » Yt-Dlp » Version: 2025.08.20

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.08.20
Yt-Dlp Project » Yt-Dlp » Version: 2025.08.22

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.08.22
Yt-Dlp Project » Yt-Dlp » Version: 2025.08.27

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.08.27
Yt-Dlp Project » Yt-Dlp » Version: 2025.09.05

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.09.05
Yt-Dlp Project » Yt-Dlp » Version: 2025.09.23

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.09.23
Yt-Dlp Project » Yt-Dlp » Version: 2025.09.26

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.09.26
Yt-Dlp Project » Yt-Dlp » Version: 2025.10.14

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.10.14
Yt-Dlp Project » Yt-Dlp » Version: 2025.10.22

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.10.22
Yt-Dlp Project » Yt-Dlp » Version: 2025.11.12

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.11.12
Yt-Dlp Project » Yt-Dlp » Version: 2025.12.08

cpe:2.3:a:yt-dlp_project:yt-dlp:2025.12.08
Yt-Dlp Project » Yt-Dlp » Version: 2026.01.29

cpe:2.3:a:yt-dlp_project:yt-dlp:2026.01.29
Yt-Dlp Project » Yt-Dlp » Version: 2026.01.31

cpe:2.3:a:yt-dlp_project:yt-dlp:2026.01.31
Yt-Dlp Project » Yt-Dlp » Version: 2026.02.04

cpe:2.3:a:yt-dlp_project:yt-dlp:2026.02.04
Yt-Dlp Project » Yt-Dlp » Version: 2026.02.21

cpe:2.3:a:yt-dlp_project:yt-dlp:2026.02.21
Yt-Dlp Project » Yt-Dlp » Version: 2026.03.03

cpe:2.3:a:yt-dlp_project:yt-dlp:2026.03.03
Yt-Dlp Project » Yt-Dlp » Version: 2026.03.13

cpe:2.3:a:yt-dlp_project:yt-dlp:2026.03.13
Yt-Dlp Project » Yt-Dlp » Version: 2026.03.17

cpe:2.3:a:yt-dlp_project:yt-dlp:2026.03.17
Yt-Dlp Project » Yt-Dlp » Version: 2026.06.09

cpe:2.3:a:yt-dlp_project:yt-dlp:2026.06.09

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-55404

Products

Pricing

Contact Us