PT-2026-134207

Name of the Vulnerable Software and Affected Versions MoLing versions prior to 0.5.0 Description When running in SSE mode using the -l flag, the /sse and /message HTTP endpoints do not authenticate requests. Additionally, the mcp-go dependency configures Access-Control-Allow-Origin: , which allow...