CVE-2026-79750
Received Received - Intake

Unauthorized Tool Execution in MCPHub

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: GitHub, Inc.

Description
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own (list views and config edits enforce ownership), but the tool-execution API does not. Any authenticated non-admin user can invoke tools on MCP servers owned by other users — servers they cannot even see in GET /api/servers. Because connected MCP servers carry real capability (filesystem, HTTP fetch, cloud APIs with the owner's keys), this is cross-tenant compromise: demonstrated arbitrary host file read (/etc/passwd, another user's secrets) and SSRF. This issue has been patched in version 1.0.30.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-31
Last Modified
2026-08-31
Generated
2026-08-31
AI Q&A
2026-08-31
EPSS Evaluated
N/A
NVD
CVE-2026-79750
EUVD
EUVD-2026-68684

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mcphub mcphub to 1.0.30 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-79750 is an authenticated Insecure Direct Object Reference (IDOR) vulnerability in MCPHub versions 1.0.29 and earlier. Non-admin users can execute tools on servers owned by other users, bypassing ownership restrictions. The tool-execution API lacks ownership checks present in other parts of the application.

Detection Guidance

To detect this vulnerability, check if your MCPHub instance is running a version prior to 1.0.30. Use commands like 'curl -s https://your-mcphub-instance/api/version' or inspect the server logs for version information. Verify if non-admin users can execute tools on servers they do not own by testing tool execution endpoints with a non-admin account.

Impact Analysis

An attacker with a valid non-admin account can exploit this to read arbitrary files (e.g., /etc/passwd or secrets) or perform SSRF via connected servers. This leads to unauthorized access to sensitive data and potential exposure of internal networks.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection (e.g., GDPR, HIPAA) due to unauthorized access to sensitive data and potential data breaches. Unauthorized file access and SSRF could expose protected health information or personal data.

Mitigation Strategies

Immediately upgrade MCPHub to version 1.0.30 or later. Review and restrict non-admin user permissions to ensure they cannot execute tools on servers they do not own. Monitor network traffic for unauthorized tool executions or SSRF attempts. Consider disabling affected endpoints temporarily if an upgrade is not immediately possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-79750. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart