CVE-2026-94047
Received Received - Intake

Improper Privilege Management in samanhappy MCPHub

Publication date: 2026-09-20

Last updated on: 2026-09-20

Assigner: VulDB

Description
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Upgrading to version 1.0.33 is sufficient to resolve this issue. The identifier of the patch is 18a4467bc4ec6390b1f841d8a468a37e9922f837. It is advisable to upgrade the affected component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-20
Last Modified
2026-09-20
Generated
2026-09-21
AI Q&A
2026-09-20
EPSS Evaluated
N/A
NVD
CVE-2026-94047
EUVD
EUVD-2026-83781

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
samanhappy mchub to 1.0.32 (inc)
samanhappy mcphub to 1.0.32 (inc)
samanhappy mcphub 1.0.33

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-94047 is a privilege escalation vulnerability in samanhappy MCPHub up to version 1.0.32. It allows authenticated non-admin users to import privileged server configurations via the template import endpoint without proper validation. This can lead to remote code execution (RCE) by enabling a stdio server with arbitrary commands, which executes as the MCPHub process. The issue also enables an unauthenticated-to-RCE chain in deployments using Better Auth social login.

The vulnerability exists because the importTemplate function in src/services/templateService.ts does not enforce privileged config checks, unlike other server management endpoints. Upgrading to version 1.0.33 resolves the issue by adding proper validation.

Detection Guidance

Check MCPHub version with: curl -s https://your-mcphub-instance/api/version | grep version. If version is below 1.0.33, the system is vulnerable. Inspect logs for POST requests to /api/templates/import from non-admin users attempting to import privileged server configs.

Impact Analysis

An attacker could exploit this to execute arbitrary commands on the host system running MCPHub with the privileges of the MCPHub process. This may allow reading sensitive files, planting backdoors, or establishing reverse shells. In deployments with self-registration via OAuth, unauthenticated attackers could gain full control of the system.

Compliance Impact

This vulnerability could lead to unauthorized access and execution of arbitrary code, potentially violating data confidentiality and integrity requirements under GDPR and HIPAA. Unauthorized code execution may result in data breaches, unauthorized data access, or system compromise, all of which are compliance violations.

Mitigation Strategies

Upgrade MCPHub to version 1.0.33 or later immediately. Restrict access to the /api/templates/import endpoint to administrators only. Review server configurations for unauthorized privileged servers imported by non-admin users.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94047. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart