What happened
CWE-1327 (bind to loopback failure). The MCP server inside Mendix Studio Pro listens on non-loopback interfaces, allowing remote interaction with the agent tool surface. Combined with the Content-Type/Origin validation gap, this creates a remotely reachable, imperfectly-guarded MCP endpoint.
Why it matters
Mendix ships MCP support so AI/agent tooling can drive the low-code platform. Exposing the MCP server off-loopback turns a developer-local tool into a network-reachable agent endpoint that remote or cross-origin callers can invoke.
Attack vector
The MCP Server's HTTP listener is not restricted to the loopback interface, so an attacker with network access can interact with the MCP Server remotely (CVSS 8.8 / 9.2 in CVSS 4.0). A related issue (CVE-2026-112137) fails to validate Content-Type and Origin headers.
Affected systems
Mendix Studio Pro 11 (>= V11.15.0 < V11.16.0) and 11.12 (>= V11.12.6 < V11.12.7) MCP Server
Mitigation
Upgrade Mendix Studio Pro to the fixed versions per Siemens advisory SSA-710379.