CyberSecBulletin

CursorTouch vulnerabilities

We track 1 vulnerability in CursorTouch products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 17, 2026.

1vulnerabilities
0critical
1high
0exploited
8.9average CVSS score

Latest CursorTouch vulnerabilities

  • 8.9 High severity

    Windows-MCP: Missing Authentication for Critical Functionality

    CVE-2026-48989CursorTouch

    Windows-MCP is an open-source project that integrates AI agents with Windows. In versions prior to 0.7.5, certain HTTP modes exposed the MCP control plane without authentication while enabling wildcard CORS (allow_origins=*, allow_methods=*, allow_headers=*).