CVE-2025-9611 Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended...

CVE-2025-9611

Microsoft Playwright MCP Server prior to version 0.0.40 is vulnerable due to missing Origin header validation, enabling DNS rebinding attacks that can trigger unauthorized requests to locally running MCP tool endpoints. Affected software: MCP Server versions

Microsoft Playwright 安全漏洞

Microsoft Playwright is an automation framework from Microsoft Corporation USA. A security vulnerability exists in Microsoft Playwright MCP Server versions prior to 0.0.40 that stems from an unvalidated Origin header and could lead to DNS rebinding attacks and unauthorized requests...

PT-2026-1558

Name of the Vulnerable Software and Affected Versions Microsoft Playwright MCP Server versions prior to 0.0.40 Description The software does not properly validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and se...

EUVD-2025-179834

Malicious code in centauri-leda-playwright-cygnus npm...

EUVD-2025-177131

Malicious code in playwright-quasar-tachyon-thuban npm...

EUVD-2025-176150

Malicious code in subscription-playwright-public-carina npm...

EUVD-2025-180409

Malicious code in antd-playwright-ichnology-technocracy npm...

EUVD-2025-179303

Malicious code in development-playwright-stratosphere-parcel npm...

EUVD-2025-177133

Malicious code in playwright-dotenv-parse-variables-parcel-less npm...

MAL-2025-188351 Malicious code in nova-astro-playwright-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be6aa5807609425f2a33e522f29ae44baadab83adcc49c1bc3035527e455cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186242 Malicious code in commitizen-playwright-selenium-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c754c3bfd1ff8786771ed58cb3d42e85de78b7b2210d6d9979d54019bdb9ae60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177117

Malicious code in pm2-gridsome-playwright-init npm...

EUVD-2025-177134

Malicious code in playwright-asthenosphere-norma-cassini npm...

EUVD-2025-177109

Malicious code in polaris-playwright-optimize-css-assets-webpack-plugin-hexo npm...

EUVD-2025-178860

Malicious code in fork-playwright-joviology-accretion npm...

EUVD-2025-177531

Malicious code in nova-astro-playwright-mira npm...

EUVD-2025-176628

Malicious code in rimraf-playwright-morgan-norma npm...

Malicious code in centauri-leda-playwright-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7671ad2b6e8453e44752aa7977970a925b638a23e89cc48acf0f5ed0d5abd921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186048 Malicious code in centauri-leda-playwright-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7671ad2b6e8453e44752aa7977970a925b638a23e89cc48acf0f5ed0d5abd921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...