# CVE-2026-79745: MCPHub unauthorized modification of global prompt and resource templates

Source: https://junglewise.ai/threats/cve-2026-79745-mcphub-unauthorized-modification-of-global-prompt-and-resource  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-31. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-79745 · Severity: high · CVSS 7.1 · Published 2026-08-31

MCPHub is a unified hub for managing and orchestrating multiple MCP servers/APIs into separate endpoints. Prior to version 1.0.32, non-admin users could create or modify global prompt templates and resources that are served to all other users on the platform. This allows attackers to inject malicious content into other users' LLM sessions or shadow legitimate resources with unauthorized versions.

Technologies: [Samanhappy Mcphub](https://junglewise.ai/threats/technologies/mcphub). Vendors: [Samanhappy](https://junglewise.ai/threats/vendors/samanhappy).

## Quick answers

**Is CVE-2026-79745 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-79745 being exploited in the wild.

**How severe is CVE-2026-79745?** High severity, with a CVSS score of 7.1, published 31 August 2026.

**Which products and versions are affected?** Samanhappy Mcphub before 1.0.32.

**Is there a fix for CVE-2026-79745?** A patch was published on 2026-08-23: Version 1.0.32 released with fix (requireAdmin helper added to prompt/resource mutations) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-79745 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-79745?** Check whether you run Samanhappy Mcphub at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an authorization bypass in the built-in prompt and resource controllers. The mutating POST/PUT endpoints for /api/prompts* and /api/resources* are attached to the authenticated router without admin-level access checks, and the handlers never validate the requesting user's role. Because the DAO singletons that store these mutations are consulted first—ahead of connected MCP servers—for every session in handleGetPromptRequest and handleReadResourceRequest, a non-admin attacker can create or overwrite global prompt templates and resources visible to all users. The fix, released in version 1.0.32, gates create/update/delete operations behind a requireAdmin helper while keeping read operations open to all authenticated users.

## Affected products

- samanhappy MCPHub before 1.0.32

## Timeline

- 2026-08-31: disclosed
- 2026-08-23: patched: Version 1.0.32 released with fix (requireAdmin helper added to prompt/resource mutations)

## References

- [https://github.com/samanhappy/mcphub/commit/6ba55ac63954a71506e61c088753251e2ff643cf](https://github.com/samanhappy/mcphub/commit/6ba55ac63954a71506e61c088753251e2ff643cf)
- [https://github.com/samanhappy/mcphub/pull/1069](https://github.com/samanhappy/mcphub/pull/1069)

## Related threats

- [samanhappy MCPHub credential exfiltration via passthroughHeaders](https://junglewise.ai/threats/cve-2026-120323-a-security-flaw-has-been-discovered-in-samanhappy-mcphub-up-to-1)
- [samanhappy MCPHub privilege management in template import](https://junglewise.ai/threats/cve-2026-94047-a-security-vulnerability-has-been-detected-in-samanhappy-mcphub)
- [MCPHub OAuth 2.0 authentication bypass in authorization server](https://junglewise.ai/threats/cve-2026-90474-mcphub-oauth-2-0-authentication-bypass-in-authorization-server)
- [MCPHub horizontal privilege escalation in tool execution API](https://junglewise.ai/threats/cve-2026-79750-mcphub-horizontal-privilege-escalation-in-tool-execution-api)
- [MCPHub SSRF guard bypass in IPv6 transition address handling](https://junglewise.ai/threats/cve-2026-79749-mcphub-ssrf-guard-bypass-in-ipv6-transition-address-handling)