CVE-2025-9611CWE-749

CVE-2025-9611

published January 7, 2026

CVSS
7.2
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended invocation of MCP tool endpoints.

The record
Technical detail
CVSS
7.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.01222 · 68.5th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2026-01-07T17:17Z
References (3)
https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-8rgw-6xp9-2fg3 · [email protected]https://github.com/microsoft/playwright/commit/1313fbd · [email protected]https://www.vulncheck.com/advisories/microsoft-playwright-mcp-server-dns-rebinding-via-missing-origin-header-validation · [email protected]
EPSS history
Timeline
  • 07 JAN 04:24Z
    Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation
    cvelistv5