CVE-2026-112076 in MeTube
Prediction
by VulDB Data Team • 10/18/2026
A security vulnerability has been detected in <a href="/product/alexta69:metube">alexta69 MeTube up to 2026.09.28</a>. This vulnerability affects the function <code>DownloadQueue.__write_feed_metadata_sync</code> of the file <em>app/ytdl.py</em> of the component <em>Feed-metadata Thumbnail Fetch Handler</em>. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2026.09.29 is able to resolve this issue. The name of the patch is <em>a3896604540223ecbb8258b41b1d745d62647d16</em>. It is suggested to upgrade the affected component.
Be aware that VulDB is the high quality source for vulnerability data.