CVE-2026-79747
Received Received - Intake

Server-Side Request Forgery in MCPHub

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: GitHub, Inc.

Description
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, an authenticated non-admin user can register a server pointing at an arbitrary URL and make the hub issue server-side requests to it, with no egress filtering (no block of loopback / RFC1918 / link-local 169.254.0.0/16). Via the OpenAPI proxy path the response body is returned to the caller (full, reflected SSRF); via the SSE/streamable-http transport the request is sent blind. This issue has been patched in version 1.0.32.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-31
Last Modified
2026-08-31
Generated
2026-08-31
AI Q&A
2026-08-31
EPSS Evaluated
N/A
NVD
CVE-2026-79747
EUVD
EUVD-2026-68687

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
samanhappy mcphub to 1.0.32 (exc)
samanhappy mcphub 1.0.31
samanhappy mcphub 1.0.32
mcphub mcphub to 1.0.32 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in MCPHub versions 1.0.31 and earlier. An authenticated non-admin user can register a server with an arbitrary URL and make the application issue server-side requests to it without proper egress filtering. This allows access to internal services, loopback addresses, private networks, and link-local addresses. The vulnerability has two attack paths: reflected SSRF via the OpenAPI proxy where responses are returned to the attacker, and blind SSRF via transport dials where requests are sent without response visibility.

Detection Guidance

To detect this SSRF vulnerability in MCPHub, check for unauthorized server registrations with arbitrary URLs by non-admin users. Review server logs for outbound requests to loopback, RFC1918, or link-local addresses. Inspect OpenAPI proxy responses for unexpected external or internal resource access.

Impact Analysis

This vulnerability can allow attackers to access internal services, loopback addresses, private networks, and link-local addresses. In cloud environments, it may expose instance metadata or IAM credentials if the metadata service is reachable. Attackers could also read sensitive data from internal systems via the reflected SSRF path.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements under GDPR and HIPAA. Exposure of internal services or metadata may result in non-compliance with data protection and security controls mandated by these regulations.

Mitigation Strategies

Upgrade MCPHub to version 1.0.32 or later. Implement SSRF egress controls to block loopback, RFC1918, and link-local addresses. Restrict server registration privileges to admin users only. Monitor network traffic for unusual outbound requests.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-79747. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart