Executive brief
MCPHub is a server management hub that centralizes configuration for multiple API endpoints. The PUT /api/system-config endpoint lacks proper access controls, allowing any authenticated user—even non-administrators—to rewrite critical global security settings. An attacker could enable guest authentication bypass, alter OAuth configuration, or redirect API traffic to malicious servers, compromising the entire instance's security posture.
Technical details
The vulnerability is a missing authorization check on the PUT /api/system-config endpoint (updateSystemConfig handler). While the endpoint is protected by app-wide authentication middleware, it never verifies the req.user.isAdmin property before accepting configuration updates. The handler destructures fields directly from req.body and merges them into the persisted systemConfig without any role-based access control. An authenticated non-admin user can single-handedly enable routing.skipAuth=true to bypass authentication globally, rewrite OAuth settings, redirect smartRouting.openaiApiBaseUrl for supply-chain attacks, or weaken other security-relevant fields. The vulnerability is patched in version 1.0.29 by adding an admin authorization gate.
Affected products
- samanhappy MCPHub <= 1.0.28
Timeline
- 2026-08-17: disclosed
- 2026-08-17: patched: Version 1.0.29 released with authorization check added