muffon vulnerabilities

1 known vulnerability in muffon from Staniel359. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  muffon: Improper Neutralization of Input During Web Page Generation

  CVE-2025-55204Jan 5, 2026Staniel359

  muffon is a cross-platform music streaming client for desktop. Versions prior to 2.3.0 have a one-click Remote Code Execution (RCE) vulnerability in. An attacker can exploit this issue by embedding a specially crafted `muffon://` link on any website they contr