CVE-2026-79792

MediumCVSS 5.6/10Last modified Aug 26, 2026

Description

A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp_download of the file src/transcribe_anything/ytldp_download.py of the component Yt-dlp Download. This manipulation of the argument url causes os command injection. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is told to be difficult. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS 3.1 5.6/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-77 CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Aug 25, 2026
Last modified: Aug 26, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-797934.3A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of th CVE-2026-797949.1A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker CVE-2026-797969.8Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated r CVE-2026-797978.8An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where applica CVE-2026-797989.9SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated r CVE-2026-797998.8A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct CVE-2026-79808.8Use after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via CVE-2026-798008.8An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation coul CVE-2026-798019.8A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauth CVE-2026-798028.8A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker CVE-2026-798038.8A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote CVE-2026-798047.3A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affected by this issue is