Executive brief
MCPHub is a self-hosted gateway for connecting and controlling MCP servers. A privilege management vulnerability in the template import endpoint allowed attackers to bypass security checks and import templates with elevated privileges. This could lead to unauthorized configuration changes and system compromise.
Technical details
The importTemplate function in src/services/templateService.ts failed to properly enforce privilege checks, allowing remote attackers to bypass authorization controls. The vulnerability was fixed by adding isPrivilegedServerConfig validation to the template import logic, as shown in patch 18a4467bc4ec6390b1f841d8a468a37e9922f837. Network access to the template import endpoint was required for exploitation.
Affected products
- samanhappy MCPHub up to 1.0.32
Timeline
- 2026-09-20: disclosed
- 2026-08-28: patched: patch 18a4467bc4ec6390b1f841d8a468a37e9922f837 enforced privilege checks