CVE-2026-62968

Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled input can influence arguments passed to `yt-dlp` under specific conditions. Unintended command-line options may be interpreted by `yt-dlp`, potentially altering its behavior. This issue is fixed in version 1.8.2.

• CWE-88

• https://github.com/arnodoelinger/dreamdisplays/blob/v1.10.0-preview.1/media/source/src/main/kotlin/com/dreamdisplays/media/source/youtube/YtDlp.kt
• https://github.com/arnodoelinger/dreamdisplays/blob/v1.10.0-preview.1/media/source/src/main/kotlin/com/dreamdisplays/media/source/youtube/process/YtDlpClientRace.kt
• https://github.com/arnodoelinger/dreamdisplays/commit/ee8702bdbebcb2eb562c8acfb55c6bc383943b94
• https://github.com/arnodoelinger/dreamdisplays/releases/tag/v1.8.2
• https://github.com/arnodoelinger/dreamdisplays/security/advisories/GHSA-5j65-hvgq-c585

Published

Oct 30, 2026

Last Modified

Oct 30, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6296Heap buffer overflow in ANGLE in Google Chrome prior to 147.…9.6
• CVE-2026-62960Git for Windows is the Windows port of Git. Prior to 2.55.0.…7.4
• CVE-2026-62963Centrifugo is an open-source scalable real-time messaging se…8.7
• CVE-2026-62965SABnzbd is an open source automated Usenet download tool. Pr…7
• CVE-2026-62966ESPAsyncWebServer is an asynchronous HTTP and WebSocket serv…7.5
• CVE-2026-62967ZTNET is a ZeroTier web UI for private controllers with mult…8.1
• CVE-2026-6297Use after free in Proxy in Google Chrome prior to 147.0.7727…8.3
• CVE-2026-62979jack lets users share media libraries through their Radarr/S…8.4
• CVE-2026-6298Heap buffer overflow in Skia in Google Chrome prior to 147.0…4.3
• CVE-2026-62982Glances is an open-source system cross-platform monitoring t…8.8
• CVE-2026-62985request-filtering-agent is an http(s).Agent implementation t…7.5
• CVE-2026-62986OpenEXR is the reference implementation and specification fo…4.3