{"id":"EUVD-2026-1179","enisaUuid":"dbacb4eb-40d5-369a-a70a-577601b2f719","description":"Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended invocation of MCP tool endpoints.","datePublished":"Jan 7, 2026, 4:24:13 AM","dateUpdated":"Oct 8, 2026, 3:21:40 PM","baseScore":7.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:L/SI:L/SA:L","references":"https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-8rgw-6xp9-2fg3\nhttps://github.com/microsoft/playwright/commit/1313fbd\nhttps://www.vulncheck.com/advisories/microsoft-playwright-mcp-server-dns-rebinding-via-missing-origin-header-validation\n","aliases":"CVE-2025-9611\nGHSA-6fg3-hvw7-2fwq\n","assigner":"VulnCheck","epss":1.22,"enisaIdProduct":[{"id":"e617c4f3-9e79-3191-8bc9-476d443bb5df","product":{"name":"Playwright","vendor":{"name":"Microsoft"}},"product_version":"0 \u003c0.0.40"}],"enisaIdVendor":[{"id":"89dd2cd5-2dba-3ba6-8258-eaae998f421f","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"52a7ae69-fe47-319c-9943-79d04b5abcdc","vulnerability":{"id":"CVE-2025-9611","description":"Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended invocation of MCP tool endpoints.","datePublished":"Jan 7, 2026, 4:24:13 AM","dateUpdated":"Oct 8, 2026, 3:21:40 PM","status":"PUBLISHED","baseScore":7.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:L/SI:L/SA:L","references":"https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-8rgw-6xp9-2fg3\nhttps://github.com/microsoft/playwright/commit/1313fbd\nhttps://www.vulncheck.com/advisories/microsoft-playwright-mcp-server-dns-rebinding-via-missing-origin-header-validation\n","enisa_id":"EUVD-2026-1179\n","assigner":"VulnCheck","epss":1.22,"dataProcessed":"Oct 29, 2026, 7:15:20 AM","vulnerabilityProduct":[{"id":"7e614f3d-1f54-33af-927f-e9e9c8c5ee98","product":{"name":"Playwright","vendor":{"name":"Microsoft"}},"product_version":"0 \u003c0.0.40"}],"vulnerabilityVendor":[{"id":"1ea89efd-e260-31b7-a36c-3b4a7cdccf2e","vendor":{"name":"Microsoft"}}]}},{"id":"fccb84f0-7377-31e6-a74d-5b8da9a00346","vulnerability":{"id":"GHSA-6fg3-hvw7-2fwq","description":"Microsoft Playwright MCP Server vulnerable to DNS Rebinding Attack; Allows Attackers Access to All Server Tools","datePublished":"Jan 7, 2026, 12:31:25 PM","dateUpdated":"Jan 7, 2026, 8:02:55 PM","baseScore":0.0,"references":"https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-8rgw-6xp9-2fg3\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-9611\nhttps://github.com/microsoft/playwright-mcp/issues/1206\nhttps://github.com/microsoft/playwright/commit/1313fbd\nhttps://github.com/microsoft/playwright-mcp\nhttps://msrc.microsoft.com/report/vulnerability/VULN-164412\nhttps://www.vulncheck.com/advisories/microsoft-playwright-mcp-server-dns-rebinding-via-missing-origin-header-validation\n","enisa_id":"EUVD-2026-1179\n","aliases":"CVE-2025-9611\nGHSA-6fg3-hvw7-2fwq\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:53:13 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}