MediumCVSS 4.6
EPSS 0.39%
cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplay_control temporary file.