Race Condition Vulnerability in yt-grabber-tui by zheny-creator

CVE-2025-62511

What is CVE-2025-62511?

The yt-grabber-tui application, a terminal user interface for downloading YouTube content, is susceptible to a Time-of-Check to Time-of-Use (TOCTOU) race condition. This issue arises during the setup of the configuration file (config.json), compromising file integrity via symbolic links. A local attacker with write access to the configuration directory can exploit this vulnerability to manipulate file writes, potentially leading to arbitrary file overwrites and data loss. If exploited with elevated privileges, the impact can extend to system file corruption. The vulnerability has been addressed in version 1.0.1.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References