# CVE-2025-11285: MCPHub ServerController command injection

Source: https://junglewise.ai/threats/cve-2025-11285-mcphub-servercontroller-command-injection  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-10-05. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2025-11285 · Severity: medium · CVSS 4 · Published 2025-10-05

MCPHub is a self-hosted MCP gateway and control plane for managing MCP servers. The ServerController component in MCPHub is vulnerable to command injection through improper handling of command/argument parameters, allowing an authenticated attacker to execute arbitrary operating system commands remotely. This could lead to unauthorized system access and control of the underlying infrastructure.

Technologies: [@samanhappy/mcphub (npm)](https://junglewise.ai/threats/technologies/samanhappy-mcphub), [Samanhappy Mcphub](https://junglewise.ai/threats/technologies/mcphub). Vendors: [npm](https://junglewise.ai/threats/vendors/npm), [Samanhappy](https://junglewise.ai/threats/vendors/samanhappy).

## Quick answers

**Is CVE-2025-11285 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-11285 being exploited in the wild.

**How severe is CVE-2025-11285?** Medium severity, with a CVSS score of 4, published 5 October 2025.

**Which products and versions are affected?** @samanhappy/mcphub (npm) SEMVER:introduced=0,last_affected=0.9.10; Samanhappy Mcphub up to 0.9.10.

**Is there a fix for CVE-2025-11285?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-11285 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2025-11285?** Check whether you run @samanhappy/mcphub (npm) or Samanhappy Mcphub at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

MCPHub contains a command injection vulnerability (CWE-77) in the ServerController component (src/controllers/serverController.ts) where user-supplied command and argument parameters are not properly sanitized before being passed to OS command execution functions. The vulnerability requires authentication to exploit but can be triggered remotely over the network without user interaction. An attacker with valid credentials can inject shell metacharacters into the command/args parameters to execute arbitrary operating system commands with the privileges of the MCPHub process. The vulnerability affects all versions up to and including 0.9.10. Proof-of-concept code has been publicly disclosed, and the vendor was contacted but has not responded with a fix.

## Affected products

- samanhappy @samanhappy/mcphub up to 0.9.10

## Identifiers

- CVE-2025-11285
- GHSA-5q2p-3jg8-2m98

## Timeline

- 2025-10-05: disclosed: Vulnerability disclosed in GHSA-5q2p-3jg8-2m98

## References

- [https://github.com/August829/YU1/issues/6](https://github.com/August829/YU1/issues/6)
- [https://github.com/samanhappy/mcphub](https://github.com/samanhappy/mcphub)
- [https://vuldb.com/?ctiid.327043](https://vuldb.com/?ctiid.327043)
- [https://vuldb.com/?id.327043](https://vuldb.com/?id.327043)
- [https://vuldb.com/?submit.659734](https://vuldb.com/?submit.659734)

## Related threats

- [samanhappy MCPHub credential exfiltration via passthroughHeaders](https://junglewise.ai/threats/cve-2026-120323-a-security-flaw-has-been-discovered-in-samanhappy-mcphub-up-to-1)
- [samanhappy MCPHub privilege management in template import](https://junglewise.ai/threats/cve-2026-94047-a-security-vulnerability-has-been-detected-in-samanhappy-mcphub)
- [MCPHub OAuth 2.0 authentication bypass in authorization server](https://junglewise.ai/threats/cve-2026-90474-mcphub-oauth-2-0-authentication-bypass-in-authorization-server)
- [MCPHub horizontal privilege escalation in tool execution API](https://junglewise.ai/threats/cve-2026-79750-mcphub-horizontal-privilege-escalation-in-tool-execution-api)
- [MCPHub SSRF guard bypass in IPv6 transition address handling](https://junglewise.ai/threats/cve-2026-79749-mcphub-ssrf-guard-bypass-in-ipv6-transition-address-handling)