get a tube of silicone and seal it. its either:

-moonroof drain hose
-breakdown of the windshield glue
-grommet in firewall missing