Back to search
CVE-2026-24139
Published: Jan 23, 2026
Modified: Jan 26, 2026
PUBLISHED
Description
MyTube is a self-hosted downloader and player for several video websites. Versions 1.7.78 and below do not safeguard against authorization bypass, allowing guest users to download the complete application database. The application fails to properly validate user permissions on the database export endpoint, enabling low-privileged users to access sensitive data they should not have permission to view.
| Vendor | Product | Versions |
|---|---|---|
franklioxygen | MyTube | affected < 1.7.79 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now