A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Upgrading to version 1.0.33 is sufficient to resolve this issue. The identifier of the patch is 18a4467bc4ec6390b1f841d8a468a37e9922f837. It is advisable to upgrade the affected component.
MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens without providing a client secret or PKCE verifier, gaining access to victim accounts and their privileges.
CVE-2026-79743 is a path traversal vulnerability in samanhappy mcphub prior to version 0.12.13. The MCPB File Upload Handler extracts a ZIP file and reads a manifest.json file, where the name field is concatenated into a file path without sanitization. This allows an attacker to craft a malicious file that can be extracted to arbitrary locations on the file system. Additionally, the unsanitized name is used in a cleanup function that may delete arbitrary directories. The issue has been patched in version 0.12.13.
CVE-2026-79744 is a high severity vulnerability in samanhappy mcphub prior to version 1.0.29. The PUT /api/system-config endpoint lacks proper authorization checks, relying only on app-wide authentication and rate limiting without verifying administrative privileges. This improper privilege management allows users with limited privileges to potentially modify system configuration. The issue has been fixed in version 1.0.29.
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, the built-in prompt and resource controllers perform no role checking. The mutating POST/PUT /api/prompts* and POST/PUT /api/resources* routes are attached to the authenticated router with no admin gate, and the handlers never read req.user. The DAO singletons they write are consulted first — ahead of any connected MCP server — for every session in handleGetPromptRequest / handleReadResourceRequest. A non-admin can therefore create, overwrite, and shadow global prompt templates and resources that all other users are served. The scored impact is the unauthorized integrity violation (creation/tampering/shadowing of globally-served records); stored prompt injection into other users' LLM sessions is a downstream consequence of that tampering. This issue has been patched in version 1.0.32.
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.31, when a bearer key with accessType: 'servers' (or 'custom') is used against a group route, isBearerKeyAllowedForRequest grants access to the entire group as long as any single server in that group appears in the key's allowedServers list — not only when every server the key is scoped to matches, and critically, without ever re-checking allowedServers again once the group-level connection is authorized. A key explicitly scoped to one specific server therefore also grants full access to every other server that happens to share a group with it, including servers the key was never authorized for. This issue has been patched in version 1.0.31.
CVE-2026-79747 is a Server-Side Request Forgery (SSRF) vulnerability in samanhappy's MCPHub prior to version 1.0.32. An authenticated non-admin user can register a server with an arbitrary URL, causing the hub to issue server-side requests without egress filtering, including to loopback and private IP ranges. The vulnerability allows full response reflection via the OpenAPI proxy path and blind requests via the SSE/streamable-http transport. This issue has been patched in version 1.0.32.
CVE-2026-79748 is a critical vulnerability in samanhappy's MCPHub prior to version 0.12.15. It involves missing authorization checks on POST /api/servers and PUT /api/servers/:name endpoints, allowing any authenticated non-admin user to execute arbitrary OS commands as the MCPHub server user. The flaw arises because these endpoints spawn configured processes without restricting command or argument inputs, potentially leading to full system compromise. The issue has been patched in version 0.12.15.
CVE-2026-79749 is a Server-Side Request Forgery (SSRF) vulnerability in samanhappy mcphub prior to version 1.0.32. The vulnerability arises because the SSRF guard does not check certain IPv6 transition address families, allowing attackers to bypass protections by encoding private IPv4 addresses within these IPv6 formats. This can enable unauthorized access to internal infrastructure. The issue has been patched in version 1.0.32.
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own (list views and config edits enforce ownership), but the tool-execution API does not. Any authenticated non-admin user can invoke tools on MCP servers owned by other users — servers they cannot even see in GET /api/servers. Because connected MCP servers carry real capability (filesystem, HTTP fetch, cloud APIs with the owner's keys), this is cross-tenant compromise: demonstrated arbitrary host file read (/etc/passwd, another user's secrets) and SSRF. This issue has been patched in version 1.0.30.
A vulnerability was identified in samanhappy MCPHub up to 0.9.10. This vulnerability affects the function handleSseConnectionfunction of the file src/services/sseService.ts. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was determined in samanhappy MCPHub up to 0.9.10. This affects an unknown part of the file src/controllers/serverController.ts of the component MCPRouter Service. This manipulation of the argument baseUrl causes server-side request forgery. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.ts. The manipulation of the argument command/args results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.