● Covered by 1 source · 1 reportMedium impact1 negative
Molly (Signal Fork) Unupdated for Three Months, Contains Known Signal Vulnerabilities
Key points
- Molly's last update was July 31, 2023 (v8.19.2-4).
- It contains vulnerabilities fixed in Signal's mainline version.
- An October exploit fixed in Signal 8.27.1 affects Molly.
- Users are recommended to use mainline Signal instead.
Outdated Security for Molly Users
The Molly messaging application, which is a fork of the Signal secure messenger, has not been updated for over three months. Its last release, version v8.19.2-4, dates back to July 31, 2023. This lack of updates has left Molly users exposed to security vulnerabilities that have since been addressed in the official Signal application.
Unpatched Vulnerabilities
Specifically, Molly contains exploits that have already been fixed in mainline Signal. An example cited is a vulnerability disclosed in October, which was patched in Signal version 8.27.1. Molly, however, has not incorporated this fix, leaving its user base susceptible to potential attacks related to this exploit.
Recommendation for Users
Given the presence of unpatched security flaws, the current recommendation for Molly users is to discontinue its use. Security experts suggest switching to the official Signal application and deleting Molly until the developers resume consistent updates that address known vulnerabilities.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
The Molly messaging app, a fork of Signal, has not received an update since July 31 (v8.19.2-4) and remains vulnerable to security exploits that have been patched in mainline Signal. Users are advised to switch to the official Signal app due to these unaddressed security risks.