CVE-2026-123816

The pyLoad download manager (prior to version 0.5.0b3.dev101 ) is vulnerable to a complete remote authentication bypass due to a flaw in the API key caching mechanism. The Api.check_apikey() function caches successful validations in self._apikey_cache using only the attacker-controlled key_id. Be...