PT-2026-1558

CVE-2025-9611

Published

2026-01-07

Updated

2026-10-08

Description by

CVSS 4.0

7.2

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Microsoft Playwright MCP Server versions prior to 0.0.40

Description The software does not properly validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server. This can lead to unintended invocation of MCP tool endpoints.

Recommendations Update to version 0.0.40 or later.

Exploitability

Exploit

Fix

Researchers

Vendors

Affected products

Weakness enumeration

CWE-749: Exposed Dangerous Method or Function

Related identifiers

CVE-2025-9611

GHSA-6FG3-HVW7-2FWQ