Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
gdown is a Google Drive public file/folder downloader. Versions prior to 5.2.2 are vulnerable to a Path Traversal attack within the extractall functionality. When extracting a maliciously crafted ZIP or TAR archive, the library fails to sanitize or validate the filenames of the archive members. This allow files to be written outside the intended destination directory, potentially leading to arbitrary file overwrite and Remote Code Execution (RCE). Version 5.2.2 contains a fix.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-40491 gdown is a Google Drive public file/folder downloader. Versions prior to 5.2.2 are vulnerable to a Path Traversal attack within the extractall functionality. When ext… https://www.cve.org/CVERecord?id=CVE-2026-40491
Post summary
The text discloses that gdown versions before 5.2.2 are vulnerable to a path traversal attack within its extractall functionality. No PoC, exploit, patch, or active exploitation details are provided.
CVE-2026-40491 Path Traversal and Arbitrary File Overwrite in gdown Versions Below 5.2.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40491
Post summary
The text announces a path traversal and arbitrary file overwrite vulnerability in gdown versions prior to 5.2.2, linking to a vulnerability record, but offers no PoC, exploit code, patches, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wkentaro | gdown | - | - | - |