CVE-2026-118578

maotoumao MusicFreeDesktop Request Forwarder information disclosure

LOW 2.1EPSS 0.2%

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipulation results in information disclosure. The attack can only be performed from the local network. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Affected: maotoumao · MusicFreeDesktop
CVSS v4.0 VULDB: 2.1 LOWCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 VULDB: 4.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v2.0 VULDB: 3.3 LOWAV:A/AC:L/Au:N/C:P/I:N/A:N
EPSS: 0.22% chance of exploitation in the next 30 days, 13th percentile
Published: 2026-10-28
Updated: 2026-10-29

Proof-of-concept exploits (1)

maotoumao/MusicFreeDesktop/issues/444Repo stars 9104★ · pushed 2026-10-09 · snapshot

CVE references

maotoumao/MusicFreeDesktopREFERENCE
https://vuldb.com/cve/CVE-2026-118578ADVISORY
https://vuldb.com/submit/1025071ADVISORY
https://vuldb.com/vuln/428017REFERENCE
https://vuldb.com/vuln/428017/ctiREFERENCE

CVE-2026-118578

Proof-of-concept exploits (1)

CVE references

References

Related