High 7.7Published Sep 17, 2026

CVE-2026-50158yutu: Arbitrary File Write via MCP `caption-download` Tool

Updated under an hour ago (2026-10-19 07:10 UTC)

Does this affect you?

It affects eat-pray-ai yutu. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for eat-pray-ai yutu

Exploited in the last 30 days

yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parameter through cmd/caption/download.go and passes it to Caption.Download() in pkg/caption/caption.go, where os.Create() creates or truncates that path without using the pkg.Root confinement boundary backed by YUTU_ROOT. A principal able to invoke caption-download, including a local HTTP client when the MCP server runs with its default authentication-disabled configuration, can write downloaded caption bytes to any path writable by the yutu process outside YUTU_ROOT. This can overwrite application files, configuration, shell startup files, logs, or data and can cause persistent code execution or denial of service depending on the selected writable target. Live caption retrieval also requires usable service credentials and an accessible caption identifier. This issue is fixed in version 0.10.9.

CVSS: 7.7 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weakness (CWE): CWE-73
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: GitHub_M
NVD analysis: Deferred
Record last updated: Sep 18, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

eat-pray-ai yutu eat_pray_ai:yutu (from the name)	before 0.10.9-dev1	CNA record

References

https://github.com/eat-pray-ai/yutu/security/advisories/GHSA-2c7f-fxww-6w6cx-refsource-confirm
https://github.com/eat-pray-ai/yutu/commit/87026c4eee1ed28775383807087343a750707bf3x-refsource-misc
https://github.com/eat-pray-ai/yutu/releases/tag/v0.10.9x-refsource-misc

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.