All vulnerabilities

CVE-2026-NONE · GHSA-r9cw-h8gp-g9hf

yutu: MCP tools delete YouTube videos, playlists, and comments with no confirmation gate

moderateCWE-862

Vendor

eat-pray-ai

Package

github.com/eat-pray-ai/yutu go

Affected

<= 0.10.11-dev2

Disclosed

2026-08-19

Credit

Avishai Gonen

missing-confirmationmcp

Published advisory