A vulnerability (CVE-2026-112136) was identified in Mendix Studio Pro 11, affecting versions 11.12.6 and 11.12.7, as well as all versions up to 11.15.0. The issue arises from the MCP Server's HTTP listener not properly restricting access to the loopback interface, potentially allowing remote systems to interact with the server. This exposes the server to unauthorized access and increases the risk of a successful attack. Developers and operators should update to a fixed version of Mendix Studio Pro 11 to mitigate this vulnerability.