CVE-2026-118578
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
A security flaw was discovered in MusicFreeDesktop 0.0.6/0.0.7/0.0.8 in an unknown function of the Request Forwarder component. Manipulation results in information disclosure, and the attack can only be performed from the local network. The exploit has been publicly released and may be used for attacks, and the project was informed early via an issue report but has not responded yet.
Risk Assessment
An attacker on the local network could use the publicly available exploit to disclose information. The risk applies to environments where MusicFreeDesktop runs on a network with untrusted devices.
Recommendation
Restrict local network access to MusicFreeDesktop and consider suspending use until a fix is released. Track the project for updates.
Other vulnerabilities in MusicFreeDesktop
Original NVD description (English source)
A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipulation results in information disclosure. The attack can only be performed from the local network. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS