Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

cursortouch/windows-mcp

              main @ 309988a
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Auth Bypass: 1 prior fix. Scrutinize any change in this area.

src/windows_mcp/__main__.py: most-fixed (2 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The MCP server runs powerful local system APIs that, if left unauthenticated, allow arbitrary remote code execution or system control. Robust Bearer token validation and strict client CIDR checks are necessary to prevent unauthorized remote access.

DNS Rebinding: Absence of Host header validation allows malicious external websites to route requests to the local MCP server via the user's browser, bypassing local boundary controls.

SSRF: The scrape tool initiates outbound HTTP requests that can be exploited via redirect chains to target internal infrastructure if HTTP redirect following is left unrestricted.