Windows-MCP vulnerabilities
1 known vulnerability in Windows-MCP from CursorTouch. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.9average CVSS score
Latest first
- 8.9 High severity
Windows-MCP: Missing Authentication for Critical Functionality
Windows-MCP is an open-source project that integrates AI agents with Windows. In versions prior to 0.7.5, certain HTTP modes exposed the MCP control plane without authentication while enabling wildcard CORS (allow_origins=*, allow_methods=*, allow_headers=*).