MuseBot vulnerabilities

CVEs whose affected-version data names the MuseBot package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119660Critical· 9.8PoC

1w ago

MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default session_key 'muse_bot_session_key'. Attackers can sign a MuseBot-session c…

▾ Abyssalyincongcyincong · MuseBotEPSS 0.52%via CVEORG