CVE-2026-79748
Received Received - Intake

Command Injection in MCPHub

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: GitHub, Inc.

Description
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.15, the POST /api/servers and PUT /api/servers/:name endpoints in MCPHub create/update MCP server configurations and then immediately spawn the configured stdio process via child_process.spawn. Authentication is required, but there is no authorization check restricting these endpoints to admins, and there is no allowlist/sanitization on the command and args fields. As a result, any authenticated non-admin user can submit a server configuration with command:"/bin/sh" (or any other binary) and arbitrary args, causing MCPHub to execute the attacker-controlled process as the MCPHub server's OS user (commonly root in the published Docker image and in npx/systemd deployments). This issue has been patched in version 0.12.15.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-31
Last Modified
2026-08-31
Generated
2026-08-31
AI Q&A
2026-08-31
EPSS Evaluated
N/A
NVD
CVE-2026-79748
EUVD
EUVD-2026-68686

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
samanhappy mcphub to 0.12.15 (exc)
samanhappy mcphub 0.12.15
mcphub mcphub to 0.12.15 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

MCPHub before version 0.12.15 has an authorization flaw in its server management endpoints. Authenticated non-admin users can exploit POST /api/servers and PUT /api/servers/:name to create or modify server configurations with arbitrary commands like /bin/sh. The system spawns these commands via child_process.spawn without validating or sanitizing the command and arguments fields, leading to remote code execution as the MCPHub server's OS user, often root.

Detection Guidance

Check MCPHub server logs for unauthorized POST /api/servers or PUT /api/servers/:name requests. Inspect running processes for unexpected child_process.spawn calls with suspicious commands like /bin/sh. Review server configurations for unrecognized MCP server entries with admin-level permissions.

Impact Analysis

This vulnerability allows any authenticated non-admin user to execute arbitrary commands on the server running MCPHub. This could lead to full system compromise, privilege escalation, data theft, or lateral movement in multi-tenant environments. Attackers could gain control over the host system, especially if MCPHub runs as root.

Compliance Impact

This vulnerability likely violates compliance requirements such as GDPR (data protection), HIPAA (health data security), and other standards mandating access controls and secure processing. Unauthorized code execution could lead to data breaches, unauthorized access to sensitive data, and failure to meet regulatory controls for confidentiality and integrity.

Mitigation Strategies

Upgrade MCPHub to version 0.12.15 or later immediately. Ensure all authenticated users have least-privilege access and verify admin-only restrictions on server mutation endpoints. Monitor for unauthorized configuration changes and restrict stdio command execution via allowlisting.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-79748. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart