CVE-2026-118578: medium-severity vulnerability in maotoumao MusicFreeDesktop
maotoumao MusicFreeDesktop Request Forwarder information disclosure
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3epss 0.2%
A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipulation results in information disclosure. The attack can only be performed from the local network. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
maotoumao · MusicFreeDesktoppublic PoCs found — 1
cve_referencegithub.com/maotoumao/MusicFreeDesktop/issues/444unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — maotoumao MusicFreeDesktop
In the same product, most dangerous first.