CVE-2026-7581 | alexta69 MeTube up to 2026.04.09 CORS Policy app/main.py on_prepare cross-domain policy

A vulnerability classified as problematic has been found in alexta69 MeTube up to 2026.04.09. This affects the function on_prepare of the file app/main.py of the component CORS Policy. The manipulation leads to permissive cross-domain policy with untrusted domains.

This vulnerability is uniquely identified as CVE-2026-7581. The attack is possible to be carried out remotely. Moreover, an exploit is present.

It is recommended to upgrade the affected component.