CVE-2026-79743
Received Received - Intake

Path Traversal in MCPHub File Upload Handler

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: GitHub, Inc.

Description
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.13, MCPB File Upload Handler extracts a ZIP file and reads manifest.json from it. The name field in the manifest is directly concatenated into a file path (line 107) without any sanitization or path traversal character validation. An attacker can craft a malicious MCPB file where manifest.name is set to something like ../../../etc/malicious, causing the file to be extracted to an arbitrary location on the file system. The cleanupOldMcpbServer function (line 110) also uses the unsanitized name, potentially allowing deletion of arbitrary directories. This issue has been patched in version 0.12.13.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-31
Last Modified
2026-08-31
Generated
2026-08-31
AI Q&A
2026-08-31
EPSS Evaluated
N/A
NVD
CVE-2026-79743
EUVD
EUVD-2026-68691

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
samanhappy mcphub to 0.12.13 (exc)
mcphub mcpb_file_upload_handler to 0.12.13 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-79743 is a path traversal vulnerability in MCPHub affecting versions before 0.12.13. The MCPB File Upload Handler extracts ZIP files and reads manifest.json without sanitizing the 'name' field. Attackers can craft malicious MCPB files with path traversal sequences like ../../../etc/malicious to write files to arbitrary locations or delete directories via the cleanupOldMcpbServer function.

Detection Guidance

To detect this vulnerability, monitor for unauthorized file writes or deletions in system directories. Check MCPHub logs for suspicious /mcpb/upload requests with malicious manifest.name values. Inspect ZIP files uploaded to the /mcpb/upload endpoint for manifest.json containing path traversal sequences like ../.

Impact Analysis

An attacker could upload a malicious MCPB file to overwrite system files, plant malware, or delete critical directories. This could lead to system compromise, data loss, or denial of service. The vulnerability is exploitable via the /mcpb/upload endpoint with user-supplied archives.

Mitigation Strategies

Immediately upgrade MCPHub to version 0.12.13 or later. If upgrading is not possible, restrict access to the /mcpb/upload endpoint and validate all manifest.name fields to reject path traversal sequences. Implement strict input validation for file paths.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-79743. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart