DIGGINGBEAGLE
Home/sources

Source · DiggingBeagle record

Windows-MCP v0.7.5 security patch: CORS and DNS rebinding

Windows-MCP release notes describing the fix for GHSA-vrxg-gm77-7q5g.

Published
May 14, 2026
Accessed
Sep 14, 2026
Publisher
CursorTouch
Source type
primary
Version
2026-05-14
Rights
Public web source; citation and short excerpt only.

Each support, contradiction or context label applies to a cited Claim, not to a whole Case.

Source record

Version 0.7.5 removed wildcard CORS by default and added TrustedHostMiddleware-based DNS rebinding protection.

Read the original source ↗

Claim-level citations (1)

Cite this record

DiggingBeagle. “Windows-MCP v0.7.5 security patch: CORS and DNS rebinding.” Published May 14, 2026 · Accessed Sep 14, 2026. https://diggingbeagle.com/sources/windows-mcp-v0-7-5-security-patch-cors-and-dns-rebinding/

Citation guidance

Why this archive exists

The source matters after the headline fades.

DiggingBeagle is a non profit research project documenting AI security incidents, agent failures, vulnerabilities and AI-assisted operations. A case keeps its claims beside the sources that support, contest or limit them. Later updates stay visible, so a reader can see when the account changed.

We publish case reconstructions, dated reporting and analysis across records. Each has a different evidentiary role. About the project and our methodology explain how the work is reviewed.