CyberSecBulletin

Gojue vulnerabilities

We track 1 vulnerability in Gojue products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.

1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score

Latest Gojue vulnerabilities

  • 9.6 Critical severity

    moling: Missing Authentication for Critical Functionality

    CVE-2026-62863Gojue

    MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse` and `/message` HTTP endpoints do not authenticate requests and the `mcp-go` dependency sets `Access-Control-Allow-Origin: *`. A malic