Security Vulnerability Molly (nprofile…htuq) ?
If your using Signal or Signal Foss you are save, as long as you keep updating.
But everyone who's using Molly hasn't updated in the last three months! I think there's a critical gap. The problem is now that this old Molly version can be attacked after a call and the attacker have access to your microphone + camera.
Unfortunately, there's still no fix released for Molly. So you just have to live with it or have to use Signal or Signal foss.
If revoking the access for camera and mic will help, I don't know.
https://github.com/mollyim/mollyim-android/issues/843
Sirius Lightning⚡
npub1v4…rhw3p
2026-10-28 15:37:38 UTC
Author Public Key
npub1v4lgwjv7qfn3t7qjscpsgz9vqvspf6hecdp2ckgp0dz89uqn5slsgrhw3pPublished at
2026-10-28 15:37:38 UTCEvent JSON
{
"id": "8012171d2d9257926eb230613bdbd2bf10f7efe5c4ff9ddb4ba72fd10fe75c3e",
"pubkey": "657e87499e026715f81286030408ac032014eaf9c342ac59017b4472f013a43f",
"created_at": 1793201858,
"kind": 1,
"tags": [
[
"p",
"7754a7761505cdb1028e8a49d9beb62e4096cd66a6a1d45b6ba86287c33d10d9",
"wss://relay.ditto.pub/"
],
[
"r",
"https://github.com/mollyim/mollyim-android/issues/843"
],
[
"client",
"Amethyst"
]
],
"content": "Security Vulnerability nostr:nprofile1qqs8w498wc2stnd3q28g5jweh6mzusyke4n2dgw5td46sc58cv73pkgpzemhxue69uhhyetvv9ujuerfw36x7tnsw43z7g2htuq ?\n\nIf your using Signal or Signal Foss you are save, as long as you keep updating.\nBut everyone who's using Molly hasn't updated in the last three months! I think there's a critical gap. The problem is now that this old Molly version can be attacked after a call and the attacker have access to your microphone + camera.\nUnfortunately, there's still no fix released for Molly. So you just have to live with it or have to use Signal or Signal foss.\n\nIf revoking the access for camera and mic will help, I don't know.\n\nhttps://github.com/mollyim/mollyim-android/issues/843",
"sig": "44af3d2ddf208ae0d7ac5f37bbd9af0c423132c3e3a7021c197358fb9194a0f67b32bd93c2369443bda1fca265f342fc366d96fce141b078e54af27fad1c8243"
}