CVE-2026-118578: maotoumao MusicFreeDesktop Request Forwarder information disclosure
A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipulation results in information disclosure. The attack can only be performed from the local network. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
maotoumao MusicFreeDesktop versions 0.0.6, 0.0.7, and 0.0.8 are identified as affected. Exploitation is limited to attackers on the local network.
Does an attacker need credentials or user interaction?
No privileges or user interaction are required according to the supplied vector. The attacker must have local-network access and can exploit the issue with low attack complexity.
Is public exploit information available?
Yes. An exploit has been publicly released and may be used in attacks.
Is a vendor fix available?
The project was notified through an issue report but had not responded at the time of publication. No fixed version or workaround is provided in the available information.