A vulnerability (CVE-2026-112137) has been discovered in Mendix Studio Pro 11, affecting versions 11.15.0 to 11.12.6 and 11.12.7. The issue arises from the MCP Server's failure to properly validate Content-Type and Origin headers in HTTP requests, making it susceptible to Cross-Site Request Forgery (CSRF). This vulnerability allows a malicious webpage to trick a user's browser into sending unauthorized requests, potentially executing unintended actions on the local MCP Server.