[ CVE-2026-62968 · Published 30 Oct 2026 ]

Vulnerability in arsmotorin dreamdisplays

CVSS 8.7 EPSS <1%No fix listed yet

[ Description ]Official description

Dream Displays provides in-game screens for streaming videos in Minecraft. From 1.5.0 until 1.8.2, user-controlled input can influence arguments passed to `yt-dlp` under specific conditions. Unintended command-line options may be interpreted by `yt-dlp`, potentially altering its behavior. This issue is fixed in version 1.8.2.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.