Auth bypass in Dtwang Line-desktop-mcp
CVE-2026-49357
Line Desktop MCP is a project that, while unaffiliated with the official line-bot-mcp-server, allows users to directly operate the LINE Desktop application on Windows or Mac via MCP. `line-desktop-mcp` supports a `--http-mode` Streamable H…
Vulnerability class: Broken Authentication
EPSS: 0.006 (43.5th percentile) — read the EPSS interpretation.
Affected products
- Dtwang Line-desktop-mcp — versions < 1.1.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)