Skip to content
OpenAdvisories

Package · PyPI

windows-mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.9
    CVE-2026-48989

    Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS

    Windows-MCP is an open-source project that integrates AI agents with Windows. In versions prior to 0.7.5, certain HTTP modes exposed the MCP control plane without authentication while enabling wildcard CORS (allow_origins=*, allow_methods=*, allow_headers=*).…

    CursorTouch Windows-MCP windows-mcp Windows PyPI