PT-2026-1558

CVE-2025-9611

Published

2026-01-07

Updated

2026-11-02

Description by

CVSS 4.0

7.2

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions Microsoft Playwright MCP Server versions prior to 0.0.40

Description Incoming connections are not validated for the Origin header. This flaw enables a DNS rebinding attack—a technique used to bypass the Same-Origin Policy—via a victim's web browser. An attacker can send unauthorized requests to a locally running MCP server, leading to the unintended invocation of MCP tool endpoints.

Recommendations Update to version 0.0.40 or later.

Exploitability

Exploit

Fix

Researchers

Jonathan Leitschuh

Vendors

Affected products

Weakness enumeration

CWE-749: Exposed Dangerous Method or Function

Related identifiers

CVE-2025-9611