CVE-2025-62511 | zheny-creator YtGrabber-TUI up to 1.0.0 on Linux Setting config.json load_json_settings toctou (GHSA-hwwf-fq6p-rw9q)

A vulnerability, which was classified as problematic, was found in zheny-creator YtGrabber-TUI up to 1.0.0 on Linux. Impacted is the function load_json_settings of the file config.json of the component Setting Handler. Executing manipulation can lead to time-of-check time-of-use.

This vulnerability is registered as CVE-2025-62511. The attack needs to be launched locally. No exploit is available.

You should upgrade the affected component.