vulnerability · DiggingBeagle record
CVE-2026-48989
Windows-MCP unauthenticated HTTP control-plane vulnerability.
- Entity kind
- vulnerability
Record description
The issue was fixed in Windows-MCP 0.7.5 by changing CORS defaults and adding DNS-rebinding protection.