Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

PyPI package

windows-mcp

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 8.9PyPIAmendedPublished

    Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS

    CVE-2026-48989 · GHSA-vrxg-gm77-7q5g

    Affected
    • PyPI windows-mcp < 0.7.5
    Fixed in
    0.7.5· Vendor fix available
    Issue
    HTTP transports expose unauthenticated PowerShell control with wildcard CORS There is an issue in the SSE and Streamable HTTP transport modes. The default stdio mode is not affected, but the documented HTTP modes expose the MCP control plane without authentication and add wildcard CORS handling around it. The same server exposes the PowerShell tool, which executes caller-controlled commands as the Windows user running Windows-MCP. Relevant source: - src/windowsmcp/main.py:37-42: httpmiddleware() installs OptionsMiddleware and CORSMiddleware with alloworigins=[""], allowmethods=[""], and allowheaders=[""]. - src/windowsmcp/main.py:45-72: OptionsMiddleware responds to every OPTIONS request with wildcard Access-Control-Allow-Origin, Access-Control-Allow-Methods, and Access-Control-Allow-Headers. - src/windowsmcp/main.py:75-113: buildmcp() constructs FastMCP(name="windows-mcp", ...) without an auth provider. - src/windowsmcp/main.py:139-151: both sse and streamable-http call mcp.run(...)…

    Recommended action: Upgrade to 0.7.5 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →