CVE-2025-62185: Mpv Missing No Ytdl

Detected an mpv argument list that does not explicitly include '--no-ytdl'. By default, mpv will attempt to execute 'youtube-dl' or 'yt-dlp' to resolve network stream links. In scenarios where user-controlled files or unverified directories are present, this can lead to arbitrary code execution if an attacker supplies a malicious executable matching the down

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2025-62185-mpv-missing-no-ytdl --engine opengrep

Description

Detected an mpv argument list that does not explicitly include '--no-ytdl'. By default, mpv will attempt to execute 'youtube-dl' or 'yt-dlp' to resolve network stream links. In scenarios where user-controlled files or unverified directories are present, this can lead to arbitrary code execution if an attacker supplies a malicious executable matching the down