{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "extracted_events": [
              {
                "introduced": "0"
              },
              {
                "fixed": "1.0.32"
              }
            ],
            "source": [
              "AFFECTED_FIELD",
              "REFERENCES"
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6ba55ac63954a71506e61c088753251e2ff643cf"
            },
            {
              "fixed": "20e3ba73aea03c493669f90526436a9a576f9c6c"
            }
          ],
          "repo": "https://github.com/samanhappy/mcphub",
          "type": "GIT"
        }
      ]
    }
  ],
  "aliases": [
    "GHSA-6cvf-cfch-4g7m"
  ],
  "database_specific": {
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
      "CWE-862"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79745.json"
  },
  "details": "MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, the built-in prompt and resource controllers perform no role checking. The mutating POST/PUT /api/prompts* and POST/PUT /api/resources* routes are attached to the authenticated router with no admin gate, and the handlers never read req.user. The DAO singletons they write are consulted first — ahead of any connected MCP server — for every session in handleGetPromptRequest / handleReadResourceRequest. A non-admin can therefore create, overwrite, and shadow global prompt templates and resources that all other users are served. The scored impact is the unauthorized integrity violation (creation/tampering/shadowing of globally-served records); stored prompt injection into other users' LLM sessions is a downstream consequence of that tampering. This issue has been patched in version 1.0.32.",
  "id": "CVE-2026-79745",
  "modified": "2026-09-02T03:30:36.058915425Z",
  "published": "2026-08-31T17:56:17.622Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/samanhappy/mcphub/releases/tag/v1.0.32"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79745.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/samanhappy/mcphub/security/advisories/GHSA-6cvf-cfch-4g7m"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-79745"
    },
    {
      "type": "FIX",
      "url": "https://github.com/samanhappy/mcphub/commit/6ba55ac63954a71506e61c088753251e2ff643cf"
    },
    {
      "type": "FIX",
      "url": "https://github.com/samanhappy/mcphub/pull/1069"
    }
  ],
  "schema_version": "1.9.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
      "type": "CVSS_V3"
    }
  ],
  "summary": "MCPHub: Missing Authorization on Built-in Prompt \u0026 Resource CRUD (Unauthorized Tampering of Globally-Served Templates/Resources)"
}