{"uuid": "84fb787b-7ac3-4ced-816a-6078da101ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50023", "type": "seen", "source": "https://bsky.app/profile/cowninja.bsky.social/post/3mxal4wtv4r2m", "content": "You paste a link into yt-dlp, ask for subtitles, and a file that looks like your .srt lands next to the video.\nIt's a Linux .desktop shortcut with the extension hidden. One double-click runs a command as you.\nhttps://hackernoon.com/from-global-allowlist-to-rce-breaking-down-cve-2026-50023-in-yt-dlp", "creation_timestamp": "2026-10-06T23:22:32.076135Z"}