CVE-2021-29954: Mozilla Hubs Cloud Reticulum

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Proxy functionality built into Hubs Cloud’s Reticulum software allowed access to internal URLs, including the metadata service. This vulnerability affects Hubs Cloud < mozillareality/reticulum/1.0.1/20210428201255.

Affected products

• Mozilla Hubs Cloud Reticulum: before 1.0.1 (fixed in 1.0.1)

Published 2021-06-24. Last modified 2026-06-17.