Read the docs
TI-2026-83392 Aliases CVE-2026-62863

Unauthenticated SSE in MoLing lets web pages hijack tool sessions

Priority HIGH 76CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

gojue MoLing before 0.5.0 leaves its /sse and /message endpoints unauthenticated in SSE mode and sends a wildcard Access-Control-Allow-Origin header (CWE-306). A malicious web page can read a session ID from /sse and use it against /message after a victim running SSE mode visits the page, even when the listener is bound to loopback. The attacker can then send unauthorized MCP tool calls that may read or write local files or run commands, depending on the configured tools.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse` and `/message` HTTP endpoints do not authenticate requests and the `mcp-go` dependency sets `Access-Control-Allow-Origin: *`. A malicious web page can open a cross-origin `EventSource` to `/sse`, including a loopback listener, and read the `endpoint` event to obtain `sessionId`. After a victim running SSE mode visits that page, the attacker can use the disclosed `sessionId` against `/message` to send unauthorized MCP tool calls. Depending on the configured tools, those calls can read or write local files, execute commands or perform other actions. Binding only to loopback does not prevent this browser-mediated attack. This issue is fixed in version 0.5.0.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00314 24th percentileScored 2026-11-07
Fix Fixed moling (gojue): 0.5.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
gojuemolingbefore 0.5.00.5.0Patch availableCNA
  • moling Vendorgojue Affected before 0.5.0 Fixed in 0.5.0 Patch available CNA

Remediation

gojue MoLing is fixed in version 0.5.0.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA moling (gojue) Fixed in 0.5.0

Timeline

  1. 2026-10-30 Threatist record created from CVE-2026-62863
  2. 2026-11-06 CISA SSVC decision points changed
  3. 2026-11-06 Priority changed: MEDIUM → HIGH

References

Other 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences