PT-2026-6379 · Npm · @Playwright/Mcp

Published 2026-01-07 · Updated 2026-01-07

OSV

CVSS v4.0

7.2

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:L/SI:L/SA:L

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended invocation of MCP tool endpoints.

Fix

Weakness Enumeration

CWE-749

Related Identifiers

GHSA-6FG3-HVW7-2FWQ

Affected Products

@Playwright/Mcp

References · 8

• https://msrc.microsoft.com/report/vulnerability/VULN-164412 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6fg3-hvw7-2fwq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9611 · Security Note
• https://github.com/microsoft/playwright/commit/1313fbd · Note
• https://github.com/microsoft/playwright-mcp · Note
• https://github.com/microsoft/playwright-mcp/issues/1206 · Note
• https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-8rgw-6xp9-2fg3 · Note
• https://vulncheck.com/advisories/microsoft-playwright-mcp-server-dns-rebinding-via-missing-origin-header-validation · Note