CVE-2026-79747: CWE-918: Server-Side Request Forgery (SSRF) in samanhappy mcphub

MCPHub, a centralized management hub for MCP servers/APIs, contains an SSRF vulnerability (CWE-918) in versions before 1.0.32. Authenticated non-admin users can register arbitrary URLs as servers, and the hub will send server-side requests to these URLs without any egress filtering to block loopback, RFC1918, or link-local addresses. The OpenAPI proxy path returns the full response body to the caller, enabling reflected SSRF, while the SSE/streamable-http transport sends the request without returning the response (blind SSRF). This vulnerability was fixed in version 1.0.32.

An attacker with authenticated non-admin access can exploit this SSRF vulnerability to make the MCPHub server send requests to arbitrary internal or external URLs, potentially accessing internal services or sensitive data. The reflected SSRF via OpenAPI proxy can leak response data to the attacker, while the blind SSRF via SSE transport can be used for indirect interactions. The CVSS score of 7.1 indicates high severity with high confidentiality impact, low integrity impact, and no availability impact.

This vulnerability has been patched in MCPHub version 1.0.32. Users should upgrade to version 1.0.32 or later to remediate this issue. No other official remediation or temporary fixes are indicated. Until upgrading, restrict authenticated user permissions to trusted users only and monitor usage of server registration features.