CVE-2026-48989 is a high-severity vulnerability in the open-source Windows-MCP project by CursorTouch. Versions before 0.7.5 expose the MCP control plane over HTTP without authentication and with permissive CORS settings (allow_origins=*, allow_methods=*, allow_headers=*). Because the same server exposes a PowerShell tool that executes commands as the Windows user running Windows-MCP, attackers can leverage this unauthenticated access to execute arbitrary PowerShell commands remotely. This vulnerability is classified as CWE-306 (Missing Authentication for Critical Function). The vulnerability was fixed in version 0.7.5.

An unauthenticated attacker can remotely execute arbitrary PowerShell commands with the privileges of the Windows user running Windows-MCP. This can lead to full compromise of the affected system. The vulnerability allows access from any origin due to wildcard CORS settings, increasing the attack surface. The CVSS 4.0 base score is 8.9 (high severity), reflecting network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability.

Upgrade Windows-MCP to version 0.7.5 or later, where this vulnerability is fixed. No other official remediation or temporary fixes are indicated. Until upgrading, restrict network access to the MCP control plane and avoid using vulnerable versions in exposed environments.