CVE-2025-9611
CVE-2025-9611 · Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended invocation of MCP tool endpoints.
CVSS 7.2 · High · EPSS 1.2% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
playwright
- Versions
- ≥ 0, < 0.0.40: Affected (semver)
Update to 0.0.40
@playwright/mcp npm
- Affected ranges
- SEMVER: < 0.0.40
Update to 0.0.40
Original sources
- https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-8rgw-6xp9-2fg3
- https://github.com/microsoft/playwright/commit/1313fbd
- https://www.vulncheck.com/advisories/microsoft-playwright-mcp-server-dns-rebinding-via-missing-origin-header-validation
- https://nvd.nist.gov/vuln/detail/CVE-2025-9611