CVE-2026-48989 | CursorTouch Windows-MCP up to 0.7.4 missing authentication (GHSA-vrxg-gm77-7q5g)

June 18, 2026 Yanac

A vulnerability categorized as critical has been discovered in CursorTouch Windows-MCP up to 0.7.4. This impacts an unknown function. Such manipulation leads to missing authentication.

This vulnerability is listed as CVE-2026-48989. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More