Skip to content
OpenAdvisories

Vendor

gojue

1 known vulnerabilities.

Products

moling 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-62863

    MoLing: unauthenticated SSE and wildcard CORS expose tool sessions

    MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse` and `/message` HTTP endpoints do not authenticate requests and the `mcp-go` dependency sets `Access-Control-Allow-Origin: *`. A mali…

    gojue moling