MENDIX STUDIO PRO · CVE-2026-112137 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
The MCP Server in Mendix Studio Pro does not validate Content-Type and Origin headers on incoming HTTP requests. A malicious web page can make a developer's browser send unauthorized requests to that local server and trigger unintended actions.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Developers who run Mendix Studio Pro 11 with its MCP Server active on their machine are exposed, because a browser visiting a malicious page can send requests to that local server. Teams whose Studio Pro versions are outside the affected ranges, or who do not run the MCP Server, can skip it.
Not affected if mcp-server-not-running, outside-affected-versions
Who cares local-dev, mcp, mendix-studio-pro
11.15.0 up to 11.16.0 (exclusive) and from 11.12.6 up to 11.12.7 (exclusive) are affected.11.16.0 or later.A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected products MCP Server does not properly validate Content-Type and Origin headers on incoming HTTP requests, leaving it vulnerable to Cross-Site Request Forgery (CSRF). This could allow a malicious web page to trick a user's browser into sending unauthorized requests and executing unintended actions on the local MCP Server.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
11.12.7