Cursortouch Windows-mcp vulnerabilities

• cursortouch windows-mcp Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS CVE-2026-48989 Fix available 8.9 HighMay 21, 2026