CVE-2026-50025

Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to version 0.4.05, Mousehole's HTTP/WebSocket management boundary is reachable without application-layer authentication or browser/LAN provenance checks. The service stores a MyAnonamouse (MAM) session cookie in state and reuses the same cookie-bearing serialization for persisted state, public API responses, and WebSocket state updates. Any client that can reach the published Mousehole port can read cookie-bearing state, connect to WebSocket state updates, replace the stored cookie, or force MAM update side effects. The deployment examples publish port 5010 broadly with Docker's `5010:5010` syntax, which can make the issue reachable on mixed-trust LAN/VPN interfaces. Version 0.4.0 patches the issue.

• CWE-200
• CWE-306
• CWE-346
• CWE-352
• CWE-862

• https://github.com/t-mart/mousehole/blob/master/CHANGELOG.md#v040---2026-06-04
• https://github.com/t-mart/mousehole/security/advisories/GHSA-v64r-gfrc-f6vq

Published

Sep 11, 2026

Last Modified

Sep 14, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5002A vulnerability has been found in PromtEngineer localGPT up …7.3
• CVE-2026-50020Netty is a network application framework for development of …5.3
• CVE-2026-50021pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm…8.1
• CVE-2026-50022Metacat is data repository software that helps researchers p…5.8
• CVE-2026-50023yt-dlp is a command-line audio/video downloader. Prior to 20…9.6
• CVE-2026-50024GitHacker is a tool that restores Git repositories from expo…5.3
• CVE-2026-50026Frappe is a full-stack web application framework. Prior to v…6.9
• CVE-2026-50027mcp-memory-service is a semantic memory layer for AI applica…9.8
• CVE-2026-50029js-toml is a TOML parser for JavaScript, Prior to version 1.…5.3
• CVE-2026-5003A vulnerability was found in PromtEngineer localGPT up to 4d…5.5
• CVE-2026-50030DataEase is an open source data visualization and analysis t…7.1
• CVE-2026-50031ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer ov…7.5