CVE-2026-33890

CVE-2026-33890 impacts MyTube versions prior to 1.8.71, allowing an unauthenticated attacker to register a passkey and automatically gain full administrative access to the application. This critical vulnerability is rated High (CVSS 8.9) due to its network-based attack vector, low complexity, and the ability to achieve a complete compromise without any prior authentication or user interaction. There is currently no public exploit code or evidence of active exploitation, though it has received minimal community discussion.