Skip to content

CVE record · 1 source

CVE-2026-62863

CVSS 9.6

MoLing is a computer-use and browser-use based MCP server.

Vendor: Gojue
Product: moling
CVSS v3.1: 9.6 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
EPSS: 0.003 (p24)
Weakness: CWE-306, CWE-942
Exposure class: AI infrastructure

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

34

CVE NVD 35h ago

MoLing is a computer-use and browser-use based MCP server.

MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse` and `/message` HTTP endpoints do not authenticate requests and the `mcp-go` dependency sets…

CVSS 9.6 Fix available CVE-2026-62863 Gojue