CVE-2026-118578— maotoumao MusicFreeDesktop Request Forwarder information disclosure

Quick assessment

Affected

maotoumao MusicFreeDesktop

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8 中发现了一个安全漏洞。受影响的组件是"Request Forwarder"中的某个未知功能。攻击者通过操纵该功能可导致信息泄露。该攻击仅能从本地网络发起。利用代码已公开，可能被用于实际攻击。项目方此前已通过问题报告获知此漏洞，但截至目前尚未作出回应。

CVSS 4.3 · Medium Updated Oct 29, 2026

Possible ATT&CK Techniques 2 AI

T1595 · Active Scanning T1040 · Network Sniffing

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

maotoumao MusicFreeDesktop Request Forwarder information disclosure

Source: CVE Program / CVE List V5

Vulnerability Description

A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipulation results in information disclosure. The attack can only be performed from the local network. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Source: CVE Program / CVE List V5