Medium 4.3

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected...

CVE-2026-118578 First seen on SecPulse 07:45

Affected packages

Ecosystem	Package	Affected	Fixed
maotoumao	MusicFreeDesktop	—	—

Original description The description as published by the source.

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipulation results in information disclosure. The attack can only be performed from the local network. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 4.3; CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4: Low 2.1; CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Published: Oct 29, 2026
First seen on SecPulse: 07:45
GHSA: GHSA-xjr9-9xmc-jjcq
CWE: CWE-200

NVD GitHub Advisory

Tags(click for explanation)

CWE

CWE-200 CWE-284

All

Maotoumao Musicfreedesktop

Detection sources

NIST National Vulnerability Database08:17
GitHub Security Advisories (Global)09:31
CVE.org (CVE Program・cvelistV5)07:45